last executing test programs: 25.123412909s ago: executing program 2 (id=207): bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000001080)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mlock(&(0x7f0000626000/0x5000)=nil, 0x5000) mkdirat(0xffffffffffffff9c, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8001}, 0x8) r4 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TCSETSF(r4, 0x5404, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x2710, @host}, 0x10) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r5, &(0x7f00000003c0)={0x28, 0x0, 0x1ffffcb66, @local}, 0x10) r6 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000000700)={0x1, @pix={0x0, 0x100, 0x34325241, 0x9, 0x7, 0x3, 0xb, 0x9597, 0x1, 0x3, 0x2, 0x7}}) 23.827910805s ago: executing program 1 (id=208): bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000001080)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mlock(&(0x7f0000626000/0x5000)=nil, 0x5000) mkdirat(0xffffffffffffff9c, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8001}, 0x8) r4 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TCSETSF(r4, 0x5404, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x2710, @host}, 0x10) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000003c0)={0x28, 0x0, 0x1ffffcb66, @local}, 0x10) r6 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000000700)={0x1, @pix={0x0, 0x100, 0x34325241, 0x9, 0x7, 0x3, 0xb, 0x9597, 0x1, 0x3, 0x2, 0x7}}) 23.014688204s ago: executing program 2 (id=209): socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newtaction={0x88, 0x30, 0x1, 0x0, 0x0, {}, [{0x74, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x11e41e7a, 0x20000000, 0x2, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = getpid() kcmp$KCMP_EPOLL_TFD(r1, 0x0, 0x7, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r5 = openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) close(r5) execveat$binfmt(0xffffffffffffff9c, r4, 0x0, &(0x7f0000000700)={[&(0x7f0000000500)='//\x00', &(0x7f0000000540)='&\'.\xad,^%,-!:\',!\\\x00']}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) openat$vicodec1(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000700), 0x1c1140, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0x5) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$TIOCSETD(r7, 0x5412, &(0x7f0000000140)=0xffffffc0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) 22.737692982s ago: executing program 0 (id=210): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) openat$dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) rseq(0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8d}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) unshare(0x22020600) r1 = open(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f00000003c0), &(0x7f0000000340)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x210000, 0x0) getsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x3, &(0x7f0000000000), &(0x7f00000004c0)=0x4) ioctl$TIOCSSOFTCAR(r3, 0x5453, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/vmcoreinfo', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000880)={0x2020}, 0x2020) 21.95981666s ago: executing program 1 (id=211): openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000014c0), 0x40280, 0x0) fanotify_init(0x0, 0x800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fanotify_mark(r1, 0xee7b37eb5895331c, 0x1019, r1, &(0x7f0000000180)='./file0\x00') prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x1, 0x44030, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x7ff}, 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}], 0x10) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x73) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe0064e230000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) mkdir(&(0x7f0000000140)='./file0\x00', 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000010403000000000000000000fa02a1b26fa7980000030500e75874b4504f74844f9557b690a7c29d4e21a8aeb3fd46762af3098e43236e84851a1841646b357c462c3426b22e0f86269ac189ca67ee854694e91fcde6c674b9f8d21ee607e29d232e5b914a5b063b9ce4ee6cc15f3f2f3312a3c45f04b8f404b539c9c5996b44fde07426265a59fc40f5e6424bb6a0af6b44d96b6d3fbbc9ade24faac6fbf14800000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x24004800}, 0x800) syz_open_dev$vim2m(&(0x7f0000000080), 0x400000000000003, 0x2) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/mdstat\x00', 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r7, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') close_range(r0, 0xffffffffffffffff, 0x0) 20.667152371s ago: executing program 2 (id=212): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) openat$dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) rseq(0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) unshare(0x22020600) r1 = open(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f00000003c0), &(0x7f0000000340)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x210000, 0x0) getsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x3, &(0x7f0000000000), &(0x7f00000004c0)=0x4) ioctl$TIOCSSOFTCAR(r3, 0x5453, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/vmcoreinfo', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000880)={0x2020}, 0x2020) 20.304086792s ago: executing program 0 (id=213): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0x1c, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102376, 0x18fe8) syz_open_dev$sg(0x0, 0x0, 0x0) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, 0x0, 0x0) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000180), 0x0) fcntl$lock(r2, 0x5, &(0x7f0000000480)={0x1, 0x3, 0x4}) r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r3, 0x0, 0x0) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000040)=ANY=[], 0x28) close(r3) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='gid_map\x00') ioctl$SNDCTL_SEQ_OUTOFBAND(r4, 0x40085112, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) write$cgroup_int(r6, &(0x7f0000000080)=0x3, 0x12) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x1, 0x0, 0x2, {0x0, 0x0, 0x0, r5, 0x18f40, 0x22008}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}]}}}]}, 0x40}}, 0x0) 19.722112773s ago: executing program 3 (id=214): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x25dfdbfe, {{@in=@broadcast, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x2, 0x0, 0x0, 0x0, 0xff}, {@in6=@private2, 0x4d6, 0x6c}, @in=@private=0x8010101, {0x0, 0x192, 0x9ba3, 0x2, 0x251c, 0x3, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3502, 0xa, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x800}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000180)=0x2, 0x4) lseek(r0, 0x1000000, 0x0) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x20, 0x4, 0x2, 0xfffffffd, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0xffffffff, 0x0, 0x0, @void, @value, @void, @value}, 0x50) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x40, r6, 0x709, 0x0, 0x3, {0x2e}, [{@pci={{0x8}, {0x11}}, {0xd}}]}, 0x40}}, 0x0) 19.655993332s ago: executing program 4 (id=215): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0, 0x0, 0x8}, 0x18) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r6, 0x325, 0x0, 0x0, {0x8}}, 0x14}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x34, r6, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x48081}, 0x800) getpeername$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000380)=0x14) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$getregs(0xc, r7, 0x869, &(0x7f0000000200)=""/166) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x0, 0x5, 0x2, {0x0, 0x1}, {0x4b, 0x6}, @cond=[{0x84, 0x402, 0x404, 0x4, 0x1, 0x29}, {0x0, 0xa0, 0x3, 0x5, 0x800, 0xff01}]}) r8 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r8, &(0x7f0000000040)="e2", 0x12d8) ioctl$EVIOCGKEY(r8, 0x80404518, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) 18.270518101s ago: executing program 1 (id=216): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r0, &(0x7f0000000280)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x4, 0x0, 0x0, 0x400000007fff, 0x3, 0x3e, 0xffffffeb, 0x294, 0x40, 0x0, 0x0, 0x8f2c, 0x38, 0x1, 0x0, 0x2}, [{0x3, 0xf97, 0x4, 0xd, 0x1cc, 0xe2, 0x1, 0x3}], "acfb3f051b91849846ec830e8fc0391036d324f1a13b7574e061825a8f5cf1f6fa11aedf8441af886914f68393e338af41d98f7ed031e6346889031d5273cfa7d0ec1641e7928743622c8b7f7bd2c007b08f3f96046ba89c0777df0ae8f128435792116bd4e68c222c42693309d9"}, 0xe6) sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000000070108000002400000000f000000030900010073797a30000000000c00034000000000000009b90d00"/56], 0x38}, 0x1, 0x0, 0x0, 0x20040810}, 0x4000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000003840)={'filter\x00', 0x7, 0x4, 0x3f0, 0x0, 0x110, 0x110, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@arp={@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0xffffff00, 0x2, 0x3, {@mac=@random="a0423ecebbbc", {[0xff, 0xff, 0xff, 0x0, 0x0, 0xff]}}, {@mac=@remote, {[0xff, 0x0, 0xff, 0xff]}}, 0x8, 0x800, 0x5, 0x4, 0x7, 0x10, 'vlan0\x00', 'batadv_slave_1\x00', {0xff}, {0xff}, 0x0, 0x70d}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x1, 0xffffffff}}}, {{@arp={@broadcast, @multicast1, 0xff000000, 0x0, 0x1, 0x0, {@mac, {[0x0, 0x0, 0x0, 0xff]}}, {}, 0x7, 0xfffb, 0x1, 0x3, 0x5, 0x6, 'pim6reg1\x00', 'ipvlan0\x00', {}, {0xff}, 0x0, 0x50}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="59a2f242dbf9", @mac=@random="6480059adaaa", @multicast1, @multicast1, 0xf}}}, {{@arp={@broadcast, @remote, 0xff000000, 0xff, 0xd, 0xb, {@mac=@link_local, {[0x0, 0xff, 0xff, 0x0, 0xff, 0xff]}}, {@empty, {[0xff, 0x0, 0xff, 0xff, 0xff, 0xeac0fa4642fd1a49]}}, 0x0, 0x6, 0x2, 0x2, 0xc, 0x1, 'netdevsim0\x00', 'geneve0\x00', {}, {}, 0x0, 0x40}, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0xde4, 0xd, 0x2}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$kcm(0x10, 0x3, 0x10) r5 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') read$FUSE(r5, &(0x7f0000004300)={0x2020}, 0x2020) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000000)='cifs\x00', 0x0, &(0x7f00000001c0)='=\n\x9b\xa1Q\x83\xe9\n@\xf6\"2a\xd7\x1fch\x1a}#\xfa\xe4\n\xdc[\x03\x97\xcd\xf1\xa6b\x9a\x1f\xff\xff\xffIT\xe4\x8c&\xac\xe6:\xc5\xe8\xd9\"\x82\xd5\xeb\x90\xef1:\xba\xc3\xc3\xd3\xad\'\xc44\x17,,\x8dZz\x04\x17-#F\xc7<\xe6\xf5]%gC\x9e\xca\nS\xc3\xc8\x98\xd8\xc8\x9eZ\xa76\x9f\xc2=\xaa\xcet7\xb9\xbd\xd47\xe3\xc8@$8\v\x9f\xfd\xe1!\x11\x19Y\x06J\x8f\x80\xef9Tw8\x1b\xe2\xf3\x85\xd5}\xa5\xb7\xd5|') syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), 0xffffffffffffffff) r6 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$cgroup_int(r6, &(0x7f0000000040)=0x3, 0x12) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) 15.507119005s ago: executing program 2 (id=217): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x18) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r1, 0x58, &(0x7f00000000c0)}, 0x10) unshare(0x20000400) socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000080)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001300)={r4, &(0x7f0000000340), 0x0}, 0x20) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e23, @private=0xa010100}, @in={0x2, 0x4e23, @multicast2}], 0x20) listen(r3, 0x9) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r7, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}, 0x1, 0x0, 0x0, 0x4800}, 0x20000000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000140)=[{0x6, 0x5, 0x3, 0x7fff0000}]}) shmdt(0x0) write$nci(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="50010202fbffffff4a355b75d9e4db09e95a0d56d482ecaf73e4f38cf06c26f7a90169b0d28e146ef279eebc135efc1f550f031de03ac80b2b980061bee67e61f0fe3a3d56a4177b7a7b5b7b1cda3b941fb10c6bff0100008855a09905f9ff0404000303000000088c23468a0758e66297e0f246b181fed491088d77b058b0bbf34d316b789613f6"], 0x5e) 15.475022284s ago: executing program 4 (id=218): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r5, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(r5, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x18, 0xe000}, 0x5}], 0x1, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ff9}]}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r8}, &(0x7f0000000300), &(0x7f0000000700)=r7}, 0x20) close_range(r6, 0xffffffffffffffff, 0x0) openat$smackfs_access(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/fs/smackfs/access2\x00', 0x2, 0x0) r9 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000040)=0xe) readv(r9, &(0x7f0000000000), 0x0) capget(&(0x7f0000000000)={0x19980330, r0}, &(0x7f0000000040)={0xa, 0x80, 0xfffffff1, 0x7, 0x0, 0x8}) close_range(r1, 0xffffffffffffffff, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@o_path={&(0x7f0000000080)='./file0\x00', 0x0, 0x8, r1}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 15.453328042s ago: executing program 1 (id=219): bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000001080)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mlock(&(0x7f0000626000/0x5000)=nil, 0x5000) mkdirat(0xffffffffffffff9c, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8001}, 0x8) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x2710, @host}, 0x10) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r5, &(0x7f00000003c0)={0x28, 0x0, 0x1ffffcb66, @local}, 0x10) r6 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000000700)={0x1, @pix={0x0, 0x100, 0x34325241, 0x9, 0x7, 0x3, 0xb, 0x9597, 0x1, 0x3, 0x2, 0x7}}) 14.604083159s ago: executing program 3 (id=220): r0 = open(&(0x7f0000000000)='.\x00', 0x624502, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)={r1, 0xffffffffffffffff, 0x2, 0x0, @val=@tcx={@void, @value}}, 0x1c) syncfs(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x10, 0x400, 0x3, 0x7e}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000)=[0xffffffffffffffff], 0x1}) bpf$MAP_DELETE_BATCH(0x18, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x5}, 0x38) io_uring_enter(r3, 0x47f6, 0x0, 0x0, 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000000000), 0x6, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef", 0x11) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000003000)=[{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000000)="c7ed8f769bb970e49d79a77aa58d49b75041ea1576f494aac07fe9f402057e04", 0x20}, {&(0x7f0000000800)="b0cf050edf62093c5569b42585349130898e35d9b1ccab55151918fecf0e957ef6c0e6957d04ea6f01b5af9bcea5c636dea38f4b506376d5288858bbac5f95be08a9a4c92cc35c042e359e92fd5ca620acd9dbb4ee", 0x55}], 0x2, &(0x7f00000002c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4000}], 0x1, 0x800) recvmsg(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000000540)=""/113, 0x71}], 0x1}, 0x40000000) unshare(0x2040600) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xb, 0xff, 0x2, 0x9, 0x1, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r8, &(0x7f0000000300), &(0x7f0000000340)=""/55}, 0x20) 14.001458641s ago: executing program 4 (id=221): bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000001080)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mlock(&(0x7f0000626000/0x5000)=nil, 0x5000) mkdirat(0xffffffffffffff9c, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8001}, 0x8) r4 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TCSETSF(r4, 0x5404, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x2710, @host}, 0x10) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000003c0)={0x28, 0x0, 0x1ffffcb66, @local}, 0x10) r6 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000000700)={0x1, @pix={0x0, 0x100, 0x34325241, 0x9, 0x7, 0x3, 0xb, 0x9597, 0x1, 0x3, 0x2, 0x7}}) 12.569310001s ago: executing program 1 (id=222): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x3, 0x0, &(0x7f0000000180)='GPL\x00', 0x6e9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5df6, @void, @value}, 0x94) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r3, 0xc02c564a, &(0x7f0000000080)={0xfffffffe, 0x48574653, 0x1, @discrete={0x6, 0x9}}) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) dup(r4) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) io_setup(0x202, &(0x7f0000000200)=0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000d80)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f00000005c0)={0x50, 0xfffffffffffffff5, r6, {0x7, 0x2b, 0x481, 0xffffffff80101000, 0x4, 0x1, 0x0, 0x6, 0x0, 0x0, 0x20, 0x9}}, 0x50) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000000)={0x0, 0x29000, 0x1000, 0x0, 0xe30152e225d98ac9}, 0x20) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xc}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x48}], {0x95, 0x0, 0x9}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x52) io_submit(r5, 0x1, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x4, 0xffffffffffffffff, &(0x7f0000000340)="896102aecdfcc44f1a461664125cd05ca43b592c3acf5bb5200e3a0133eba4bd9f01b8d5d8bc5ab17a22185f176fefc1fa7ee245f08c8aaefb6c7524e93774c81a7f21247425a677690913083cf98a3ea7", 0x51, 0x2}]) 12.534887848s ago: executing program 0 (id=223): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) openat$dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) rseq(0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8d}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) unshare(0x22020600) r1 = open(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f00000003c0), &(0x7f0000000340)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x210000, 0x0) getsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x3, &(0x7f0000000000), &(0x7f00000004c0)=0x4) ioctl$TIOCSSOFTCAR(r3, 0x5453, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/vmcoreinfo', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000880)={0x2020}, 0x2020) 11.23258121s ago: executing program 3 (id=224): ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000340)={0xc}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_procfs(r1, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, 0x0, &(0x7f0000000740), 0x75}, 0x38) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000180)={0x0, 0xfd, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}}, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) ioctl$IOMMU_HWPT_ALLOC$TEST(0xffffffffffffffff, 0x3b89, &(0x7f00000002c0)={0x28, 0x3, 0x0, 0x0, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000280)}) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(0xffffffffffffffff, 0x3b8c, &(0x7f0000000100)={0x30, r5, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, 0x0, 0x0) 10.107835305s ago: executing program 4 (id=225): ioprio_set$uid(0x3, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = add_key(&(0x7f0000000040)='rxrpc\x00', &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$read(0xb, r4, 0x0, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r5, 0x541b, 0xffffffffffffffff) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000300)={r7, @in={{0x2, 0x4e21, @private=0xa010101}}, [0x7, 0x9, 0x5f, 0x70, 0x4, 0x57a, 0xffffffffffffffff, 0xff, 0x4, 0x10c7, 0x3a, 0x7, 0x8, 0xfff, 0x4]}, 0x0) getpeername$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000002c0)=0x14) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000004c0)="34d1d9", 0x3}, {&(0x7f0000000800)}, {&(0x7f0000000840)="19370d3c35806e920da9bb8621fa6217cbd1a57beef12ac2b369ee6ad59162f8161dc188b55655090f79d4d54cbf49ab80a9", 0x32}], 0x3, 0x0, 0x0, 0x20000004}, 0x4000081) fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x0) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/pm_test', 0xc3a01, 0x0) sendfile(r9, r8, 0x0, 0x8) 7.250689946s ago: executing program 3 (id=226): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-avx\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$unix(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000001c0)="4906f4d663c8960b5a1c28367f34e4daba615b159d6c52a36296a64d0b5fd4ee7ca1ed4c53acda8dd9b11f6d66ecbf4b56e83a641cd08839ca483a78b0cfd48923c2", 0x42}], 0x1, 0x0, 0x0, 0x40000}, 0x800) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@RTM_DELMDB={0x38, 0x55, 0xb09, 0x2000001, 0x25dfdbfc, {0x7, r5}, [@MDBA_SET_ENTRY={0x20, 0x1, {r5, 0x1, 0x1, 0x2, {@ip4=@multicast1, 0x800}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x101}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r8 = syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r8, 0xc0585605, &(0x7f0000000140)={0x1, 0x0, {0x0, 0x8, 0x4027, 0x0, 0x8, 0xffffffffffffffff, 0x0, 0x4}}) read$msr(r7, &(0x7f0000032680)=""/102400, 0x19000) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r9 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, &(0x7f0000000380)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(r9, 0x9, 0x0, 0x0) syz_io_uring_submit(r10, r11, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x22}, 0x0, 0x600c011, 0x1}) io_uring_enter(r9, 0x3b79, 0x3137, 0x8, 0x0, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a64000000060a0b040000000000000000020000023800048034000180090001007866726d0000000024000280080001400000000405000300010000000800024000000006085b0440000000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x8c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400080000000000000200000054000480500001800a000100696e6e65720000004000028008000240000000840800034000000007080004400000000f08000140000000001c0005800c0001007061796c6f6164000800028008000240000000050900010073797a30000000000900020073797a32"], 0xa8}}, 0x0) 7.223162826s ago: executing program 0 (id=227): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) openat$dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) rseq(0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) unshare(0x22020600) r1 = open(0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f00000003c0), &(0x7f0000000340)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x210000, 0x0) getsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x3, &(0x7f0000000000), &(0x7f00000004c0)=0x4) ioctl$TIOCSSOFTCAR(r3, 0x5453, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/vmcoreinfo', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000880)={0x2020}, 0x2020) 7.087909085s ago: executing program 2 (id=228): write$tun(0xffffffffffffffff, 0x0, 0x10e) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) getxattr(0x0, 0x0, 0x0, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, 0x0, 0x40004840) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) socket$nl_route(0x10, 0x3, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @mcast1, 0x5}, 0x1c) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x3d0, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x430) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000001440)=ANY=[], 0xc0) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$EXT4_IOC_GETSTATE(r3, 0x40046629, &(0x7f00000000c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0xd9623000) 6.120228598s ago: executing program 1 (id=229): r0 = syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)="09f1127adf0a487b28832b01971a540029bb9d555cc4e783243eb84e48d217f6ca1da107fce7d149e1169c157aea4fcf583b7987d85bd06d2acbdb860c59ebac6bb40d48c3e8213e2ce37894134900b18c55bf42d30e0fd81e89cfb0827f4b0f58473c079b816806f8878191c237750253288b323ae5b3417427dce5b03902f5059813e18ca2d5c796f6f0d964088764545f80ac6c25e3c6cb368497d12e7450810dddfe") r1 = syz_open_dev$loop(&(0x7f0000000100), 0x1000001, 0x6100) iopl(0x3) add_key$fscrypt_provisioning(&(0x7f00000001c0), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x3, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x2040, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85512, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}) fanotify_init(0x202, 0x101000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='hfsplus\x00', 0x2000010, 0x0) r6 = syz_io_uring_setup(0x66e, &(0x7f0000000240)={0x0, 0xff7fffff, 0x10100}, &(0x7f0000000380), &(0x7f0000000200)) io_uring_enter(r6, 0x567, 0x0, 0x0, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000003680)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd60122d9200283afffe8000000000000000000000000000bbff0200000000000000000000000000018900907800fbffffff0000000000000000000001ff0000aafc0100"/94], 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYBLOB="01002ebd7000000000001400000018000180140002006e657464657673696d3000000000000005000b000100000008000d000d000000080009000900000008000a"], 0x4c}}, 0x0) kcmp(r0, r0, 0x5, 0xffffffffffffffff, 0xffffffffffffffff) write$binfmt_misc(r7, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r7, 0x0, {0x2a00, 0x80010000, 0x0, 0x4, 0x48dd, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac100875397bdb22d0000b420a1a93c9e01177d3d058dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x0, 0x2000000000001]}}) 4.983250761s ago: executing program 3 (id=230): bpf$TOKEN_CREATE(0x24, &(0x7f00000003c0), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x13, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getresgid(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r3, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b005000000000000290000003600000000b2"], 0x5b0}, 0x20008001) getrusage(0x1, &(0x7f0000000300)) sendmsg$inet6(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000022c0)="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", 0x169}], 0x1}, 0x20000044) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmsg$alg(r6, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmsg$kcm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000003c0)=""/36, 0x24}], 0x1}, 0x0) shutdown(r4, 0x0) 4.890993529s ago: executing program 0 (id=231): ioprio_set$pid(0x1, 0x0, 0x6000) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800"], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) timerfd_settime(0xffffffffffffffff, 0x2, &(0x7f0000007000)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r4, 0x4b72, &(0x7f0000000040)={0x4, 0x0, 0x3, 0x1d, 0x100, &(0x7f00000000c0)="387ed7626d850509a2d6c1aa38f15cd00f85c263cb226db671261fff7ce9c555f18dafae3530db6dd493f2a3cc88721b9ae21b3e3b4523ae2594f47d8f62b480c4160b1f90ac9c41fae6ab12ac4c113fef588684ef494c89092883b902a41cd75387ef6f7bc7d460d5e665f398ff95596dc94ec97003c7e6f3c82fbd8de6e11aa4031a61c51caf7a65a2b613bda33f3eaeae635d7cd81761e74c38a7695800a15516eb337056e02335f9a7d10aa2eaf7beb7e1aed6e850ecb3421143c5c4ded0f06affc524dcf3208272619b6a952db5bc96141b26c54d13c7a5416287a3b6f7aadf50bc549974b6401a19cdb130282b955592efa94242065a4c8d695a2cdd9ada350defd58c775b92d348305774d3a256c7520b285d8da0dbf5e20d604413ed2ddf9bcbf881caf811852806175d63892a15234fbcd7a88a2a0aea45d19148f0e7dada7d6d0d77881387fdeaa0284abe90b88dfff412bff40c31c6415c54ae3335e54a49d315851feffe30d999c36def4df7df747695efbd649f42f310859122c0d2c1e558dc6586958a283762386ecf369274e43003a0fdff59ea515eb44504901ef0d00baa91c10a8e44a76aac3468a15bd3d45ad389977467f306f9bcde071b30769795eed2f1580414d168f557cd90040c4bd2a3d6bc5092548feaef7204a12cece59181fcb5bad8c24bd9f8f78d17ab82831325501e80d899e9252f99d3a2666343392fda11504800f4dd9f45657f8224fc78eb1168fe0527fac33466aadf48f16994d29a47778566e0f3945b2bf36b6eecc7fa18914beb66ac9e519bd333b30d3ce2f50dddeea3447aebbe3bed781e39d5a0fb0cdc60e196f2261305feb596b68986af3eee7b199fefb5f79ffb2d1050e46982af1c14a88dd9000400002f56a8404755c73e74bb90e64bab9647c70ed5afca1c3d87907d01000100df6f40a80ace2bb8a2aad3b0c66915927db4233181943d88c0c76d5969e2043db5bd77fd60ba0f013139929ccfec965c0c769785a4d23332ba1f0875e3146afef5b20cc306d3ecee65944fe9829e0ad0c3f6bb2fd81bc31152538db50f47dc38ba908a0d808687e478a609fe0daa02d4e9c618b99266e7f2e98597e2813e1dba9c3c16e9fab3bda6ed33cb1c75513e2264b69d472dd0e1338688ba782b41bde141f99c4894ded98eff9aa53d22eb77c9d93169c04ab2490bf28106f770e07eb7a9e87dde71929f918b98c4cbfcb11a90139264a9ee8081973167f493760278df0cc34be9e8f86f948d9a62e63ad6ca9d2195ff9c6320c85bddc42915e4f3a5db642447bc2195a3d64e04c9ecd1c313c08e29b814bd8fed1ab6d2846c73345962895d289ac77152cac2e0e32b75ce814731c542091f218dd1e68a15f8226577bf9481ae0555db64a717eb23a811356d00"}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{r0, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000b80)='%pB \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001300)={{r5, 0xffffffffffffffff}, &(0x7f0000001280), &(0x7f0000000080)='%+9llu \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r6}, 0x4) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x700, 0x7800, 0x1, 0x2, {{0x6, 0x4, 0x2, 0xb, 0x18, 0x66, 0x0, 0x6, 0x4, 0x0, @loopback, @loopback, {[@end]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x3, &(0x7f0000000bc0)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) r8 = socket$phonet(0x23, 0x2, 0x1) sendto$phonet(r8, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x23, 0x0, 0x2}, 0x10) shmctl$IPC_RMID(0x0, 0x0) r9 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r9, &(0x7f0000000140)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e22, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}}, 0x24) epoll_ctl$EPOLL_CTL_DEL(r5, 0x2, 0xffffffffffffffff) 3.557318123s ago: executing program 2 (id=232): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000001300)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000004000000000000000000000203000000020000000000000c00000000000000000000000902000000000051"], 0x0, 0x40, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="0b031404e0ff640f020047540ff6a13bb1000e04080008004803", 0x10f6c, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14) r4 = timerfd_create(0x8, 0x800) timerfd_gettime(r4, &(0x7f0000000200)) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = socket$inet6(0xa, 0x2, 0x2) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000080)=0x8, 0x4) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, 0x0, 0x0) setsockopt$sock_int(r7, 0x1, 0x31, &(0x7f0000001600), 0x4) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000000)={@mcast2}, 0x14) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000000)='net/rt_acct\x00') add_key(&(0x7f0000000000)='big_key\x00', 0x0, &(0x7f00000002c0)="1d", 0x1, 0xfffffffffffffffe) 2.898032781s ago: executing program 4 (id=233): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000000085000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x28, 0x80008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) fcntl$lock(r4, 0x5, &(0x7f00000007c0)={0x1, 0x2, 0x6, 0xffffffff}) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000380)={0xc}) r6 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x33, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x4}]}, 0x10) syz_emit_ethernet(0x2e, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000000800450000200000000002119078000000000069f76bcc504b1ad100000000004e20"], 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11000000040000000400000022bf000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) socket(0x2c, 0x3, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r7, 0x0, 0x0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r7, &(0x7f0000000340)}, 0x20) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r5, 0x3ba0, &(0x7f00000003c0)={0x48, 0x2, r8}) 2.220922729s ago: executing program 3 (id=234): add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f0000000240), 0x0, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[], 0x0, 0x2e, 0x0, 0x0, 0x5, 0x10000, @value}, 0x28) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x6, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1b, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x67) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r3, 0xfffffffc) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r7, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r6, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) close(0x4) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc0405668, 0x0) 1.77539916s ago: executing program 0 (id=235): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000c6e656bed8a0048300"/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x7775, 0x0, 0x0, 0x313}, &(0x7f00000005c0), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_MEM_REGION(r3, 0x22, &(0x7f0000000240)={&(0x7f00000000c0)={0x0, 0x0, 0x1, 0x8000, 0x3}}, 0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r6 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r6, 0x400448c8, &(0x7f0000000480)={r5, r6, 0xc, 0x0, 0x0, 0xc, 0x96, 0x458, 0x6, 0x1, 0x1, 0x7, 'syz0\x00'}) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0xa, &(0x7f00000000c0)=0x2, 0x4) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r7, 0x6, 0x16, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r7, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r7, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) socket$packet(0x11, 0x3, 0x300) 0s ago: executing program 4 (id=236): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2}, './file1\x00'}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000000c0)={0x0, 0x3, r1, 0x6}) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000280)={0x77359400}, &(0x7f0000048000)=0x2, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r4 = dup(0xffffffffffffffff) r5 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000400)={0xf0f016, 0x2}) write$UHID_INPUT(r4, 0x0, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000003e000701fcfffffffddbdf25047c0000100036800c00020007000b00000000000c000180060006008e"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="71756f74612c0076803d1ef1e21d15ecae5550b872972cd5fd8e642f1e64ccb6bbcfe6ba65a7cf4fdbc772c2977e319ff8f2cc885c06cc0d16a110373fa6cff7b62d0d527d078b3154bfe4913a1a66b19475a0a4d0c5831d8f2c3697d547a24e519af5b610225e5ed819cdd7c1676f08c149c1769b8d66861e3aeddb1cfbce19e76c1b822025d12ad2d4c98f62c117e2b3a0681f7893eeef0f20e8f7c2f8a903b3d0a783c57a9c7ac98e6c5543386319ed2da8a82aeae272314d6303856667"]) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000200)) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.149' (ED25519) to the list of known hosts. [ 83.053453][ T5804] cgroup: Unknown subsys name 'net' [ 83.250108][ T5804] cgroup: Unknown subsys name 'cpuset' [ 83.259579][ T5804] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.947013][ T5804] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 87.761446][ T5821] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.770195][ T5821] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.789395][ T5825] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.806676][ T5829] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.814574][ T5829] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.823441][ T5829] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 87.831416][ T5829] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 87.855917][ T5829] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.875564][ T5838] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 87.883764][ T5838] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 87.896677][ T5834] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 87.905957][ T5838] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 87.913909][ T5834] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 87.913982][ T5838] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.931411][ T5836] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.934874][ T5835] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.939636][ T5834] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.947374][ T5835] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 87.955140][ T5836] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.961051][ T5838] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.967080][ T5836] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.975564][ T5838] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 87.998294][ T5836] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.010697][ T5836] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 88.029605][ T5836] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.596824][ T5816] chnl_net:caif_netlink_parms(): no params data found [ 88.742443][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 88.792359][ T5824] chnl_net:caif_netlink_parms(): no params data found [ 88.943967][ T5817] chnl_net:caif_netlink_parms(): no params data found [ 88.987310][ T5816] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.994631][ T5816] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.003398][ T5816] bridge_slave_0: entered allmulticast mode [ 89.010945][ T5816] bridge_slave_0: entered promiscuous mode [ 89.057912][ T5816] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.065261][ T5816] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.072914][ T5816] bridge_slave_1: entered allmulticast mode [ 89.080584][ T5816] bridge_slave_1: entered promiscuous mode [ 89.142859][ T5815] chnl_net:caif_netlink_parms(): no params data found [ 89.208479][ T5816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.225042][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.232348][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.240520][ T5824] bridge_slave_0: entered allmulticast mode [ 89.247800][ T5824] bridge_slave_0: entered promiscuous mode [ 89.256825][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.263977][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.271510][ T5824] bridge_slave_1: entered allmulticast mode [ 89.279654][ T5824] bridge_slave_1: entered promiscuous mode [ 89.310252][ T5816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.357726][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.364971][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.372513][ T5828] bridge_slave_0: entered allmulticast mode [ 89.380514][ T5828] bridge_slave_0: entered promiscuous mode [ 89.449999][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.463058][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.473163][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.483291][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.490592][ T5828] bridge_slave_1: entered allmulticast mode [ 89.498774][ T5828] bridge_slave_1: entered promiscuous mode [ 89.520754][ T5816] team0: Port device team_slave_0 added [ 89.573003][ T5817] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.580626][ T5817] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.588034][ T5817] bridge_slave_0: entered allmulticast mode [ 89.596053][ T5817] bridge_slave_0: entered promiscuous mode [ 89.605073][ T5816] team0: Port device team_slave_1 added [ 89.633923][ T5824] team0: Port device team_slave_0 added [ 89.654653][ T5817] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.662564][ T5817] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.672469][ T5817] bridge_slave_1: entered allmulticast mode [ 89.680032][ T5817] bridge_slave_1: entered promiscuous mode [ 89.724392][ T5824] team0: Port device team_slave_1 added [ 89.748326][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.785932][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.792923][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.819699][ T5816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.865167][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.877349][ T5817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.890210][ T5817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.900197][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.907437][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.933634][ T5816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.960020][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.967138][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.993343][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.006238][ T5127] Bluetooth: hci2: command tx timeout [ 90.006245][ T5836] Bluetooth: hci1: command tx timeout [ 90.051530][ T5815] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.058934][ T5815] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.067008][ T5815] bridge_slave_0: entered allmulticast mode [ 90.074268][ T5815] bridge_slave_0: entered promiscuous mode [ 90.082871][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.090459][ T5836] Bluetooth: hci0: command tx timeout [ 90.092316][ T5127] Bluetooth: hci3: command tx timeout [ 90.096531][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.101545][ T5836] Bluetooth: hci4: command tx timeout [ 90.128348][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.167526][ T5828] team0: Port device team_slave_0 added [ 90.188499][ T5815] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.196172][ T5815] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.203371][ T5815] bridge_slave_1: entered allmulticast mode [ 90.211121][ T5815] bridge_slave_1: entered promiscuous mode [ 90.249651][ T5815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.261656][ T5828] team0: Port device team_slave_1 added [ 90.270873][ T5817] team0: Port device team_slave_0 added [ 90.281481][ T5817] team0: Port device team_slave_1 added [ 90.306156][ T5815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.410902][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.418295][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.444844][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.458079][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.465055][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.491078][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.518206][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.525215][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.551951][ T5817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.582989][ T5824] hsr_slave_0: entered promiscuous mode [ 90.590181][ T5824] hsr_slave_1: entered promiscuous mode [ 90.602948][ T5816] hsr_slave_0: entered promiscuous mode [ 90.609688][ T5816] hsr_slave_1: entered promiscuous mode [ 90.616757][ T5816] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.624616][ T5816] Cannot create hsr debugfs directory [ 90.633082][ T5815] team0: Port device team_slave_0 added [ 90.656424][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.663395][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.689640][ T5817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.712060][ T5815] team0: Port device team_slave_1 added [ 90.751063][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.758220][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.784381][ T5815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.840032][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.847134][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.873415][ T5815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.994736][ T5817] hsr_slave_0: entered promiscuous mode [ 91.001223][ T5817] hsr_slave_1: entered promiscuous mode [ 91.008901][ T5817] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.017168][ T5817] Cannot create hsr debugfs directory [ 91.056866][ T5828] hsr_slave_0: entered promiscuous mode [ 91.063272][ T5828] hsr_slave_1: entered promiscuous mode [ 91.069920][ T5828] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.077566][ T5828] Cannot create hsr debugfs directory [ 91.139144][ T5815] hsr_slave_0: entered promiscuous mode [ 91.145647][ T5815] hsr_slave_1: entered promiscuous mode [ 91.152019][ T5815] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.160174][ T5815] Cannot create hsr debugfs directory [ 91.688988][ T5824] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.710845][ T5824] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.721987][ T5824] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.741525][ T5824] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.795833][ T5816] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 91.832090][ T5816] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 91.843302][ T5816] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 91.854212][ T9] cfg80211: failed to load regulatory.db [ 91.870164][ T5816] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 91.981127][ T5817] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 91.994229][ T5817] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 92.009866][ T5817] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 92.021861][ T5817] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 92.085697][ T5836] Bluetooth: hci1: command tx timeout [ 92.086603][ T5127] Bluetooth: hci2: command tx timeout [ 92.138655][ T5828] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 92.160103][ T5828] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 92.167612][ T5127] Bluetooth: hci4: command tx timeout [ 92.168245][ T5836] Bluetooth: hci0: command tx timeout [ 92.175555][ T5127] Bluetooth: hci3: command tx timeout [ 92.197324][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.208428][ T5828] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 92.231913][ T5828] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 92.323899][ T5824] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.356592][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.363921][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.394752][ T5815] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 92.412836][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.420027][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.453833][ T5815] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 92.467233][ T5815] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 92.478506][ T5815] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 92.511500][ T5816] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.551367][ T5817] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.575062][ T5816] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.604414][ T5817] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.649230][ T71] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.656538][ T71] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.670007][ T71] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.677200][ T71] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.720241][ T71] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.727457][ T71] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.742133][ T71] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.749311][ T71] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.852918][ T5817] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 92.932906][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.029314][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.082772][ T1136] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.089996][ T1136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.170144][ T5815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.205117][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.212396][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.295120][ T5815] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.388190][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.399849][ T83] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.407100][ T83] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.450677][ T83] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.457936][ T83] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.541666][ T5817] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.640219][ T5816] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.689621][ T5824] veth0_vlan: entered promiscuous mode [ 93.749854][ T5824] veth1_vlan: entered promiscuous mode [ 93.781190][ T5817] veth0_vlan: entered promiscuous mode [ 93.837575][ T5816] veth0_vlan: entered promiscuous mode [ 93.873387][ T5817] veth1_vlan: entered promiscuous mode [ 93.915017][ T5824] veth0_macvtap: entered promiscuous mode [ 93.929435][ T5816] veth1_vlan: entered promiscuous mode [ 93.943060][ T5824] veth1_macvtap: entered promiscuous mode [ 94.048891][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.064668][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.107299][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.132433][ T5817] veth0_macvtap: entered promiscuous mode [ 94.162240][ T5817] veth1_macvtap: entered promiscuous mode [ 94.170531][ T5127] Bluetooth: hci1: command tx timeout [ 94.170921][ T5836] Bluetooth: hci2: command tx timeout [ 94.182906][ T5824] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.199572][ T5824] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.208695][ T5824] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.218093][ T5824] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.229769][ T5816] veth0_macvtap: entered promiscuous mode [ 94.246308][ T5836] Bluetooth: hci3: command tx timeout [ 94.246620][ T5127] Bluetooth: hci4: command tx timeout [ 94.251969][ T5836] Bluetooth: hci0: command tx timeout [ 94.280599][ T5815] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.297497][ T5816] veth1_macvtap: entered promiscuous mode [ 94.347738][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.361894][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.399535][ T5817] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.424627][ T5817] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.439072][ T5817] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.448003][ T5817] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.530915][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.562546][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.563904][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.593756][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.645163][ T5815] veth0_vlan: entered promiscuous mode [ 94.652213][ T5816] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.661364][ T5816] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.671064][ T5816] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.680426][ T5816] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.741294][ T71] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.750099][ T71] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.768812][ T5815] veth1_vlan: entered promiscuous mode [ 94.882517][ T71] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.906609][ T71] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.930985][ T5824] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 94.942544][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.968213][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.012804][ T5828] veth0_vlan: entered promiscuous mode [ 95.064378][ T5815] veth0_macvtap: entered promiscuous mode [ 95.103480][ T5828] veth1_vlan: entered promiscuous mode [ 95.131599][ T71] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.142914][ T71] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.303511][ T5815] veth1_macvtap: entered promiscuous mode [ 95.344551][ T1136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.361249][ T1136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.751563][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.784034][ T5828] veth0_macvtap: entered promiscuous mode [ 95.818330][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.859001][ T5815] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.868011][ T5815] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.878661][ T5815] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.915440][ T5815] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.947375][ T5828] veth1_macvtap: entered promiscuous mode [ 95.974068][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.987035][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.157440][ T5828] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.167565][ T5828] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.181256][ T5828] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.192707][ T5828] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.968596][ T5127] Bluetooth: hci2: command tx timeout [ 96.969132][ T5821] Bluetooth: hci4: command tx timeout [ 96.980816][ T5821] Bluetooth: hci3: command tx timeout [ 96.986787][ T5821] Bluetooth: hci0: command tx timeout [ 96.992764][ T5836] Bluetooth: hci1: command tx timeout [ 97.450468][ T5921] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 99.032563][ T5936] Zero length message leads to an empty skb [ 99.471327][ T5938] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.605590][ T5938] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.270279][ T83] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.296580][ T83] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.438436][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.452998][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.486015][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.493913][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.953718][ T5966] xt_hashlimit: overflow, rate too high: 0 [ 105.774980][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 105.784405][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 105.876873][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 105.886221][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 105.894418][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 105.928313][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 105.979245][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 105.988539][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 106.081594][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 106.090972][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 106.305874][ T5987] input: syz0 as /devices/virtual/input/input6 [ 106.690374][ T5989] netlink: 28 bytes leftover after parsing attributes in process `syz.0.15'. [ 108.070127][ T5836] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 108.078708][ T5836] Bluetooth: hci3: Injecting HCI hardware error event [ 108.087638][ T5836] Bluetooth: hci3: hardware error 0x00 [ 109.274463][ T6007] process 'syz.1.18' launched './file0' with NULL argv: empty string added [ 110.131778][ T6008] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 110.138496][ T6008] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 110.146921][ T6008] vhci_hcd vhci_hcd.0: Device attached [ 110.253328][ T5836] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 110.319933][ T5986] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.327940][ T5986] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.617851][ T47] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 110.722984][ T6017] futex_wake_op: syz.4.21 tries to shift op by 32; fix this program [ 112.235874][ T6000] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 113.835617][ T6028] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 114.801629][ T5986] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 116.338798][ T5986] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 116.972533][ T6044] vhci_hcd vhci_hcd.0: port 0 already used [ 117.023233][ T6044] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(17) [ 117.029908][ T6044] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 117.054845][ T6044] vhci_hcd vhci_hcd.0: Device attached [ 117.073245][ T5986] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.083062][ T5986] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.095775][ T5986] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.104786][ T5986] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.113872][ T6051] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(19) [ 117.120554][ T6051] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 117.129164][ T6051] vhci_hcd vhci_hcd.0: Device attached [ 117.331115][ T6044] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(21) [ 117.337793][ T6044] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 117.347468][ T6044] vhci_hcd vhci_hcd.0: Device attached [ 117.804316][ T6051] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 118.148909][ T6044] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(23) [ 118.155594][ T6044] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 118.257676][ T6044] vhci_hcd vhci_hcd.0: Device attached [ 118.498199][ T5986] syz.3.14 (5986) used greatest stack depth: 20224 bytes left [ 118.507779][ T6062] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 118.646142][ T6044] vhci_hcd vhci_hcd.0: pdev(2) rhport(6) sockfd(25) [ 118.652812][ T6044] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 118.681627][ T6044] vhci_hcd vhci_hcd.0: Device attached [ 118.719681][ T6063] veth2: entered allmulticast mode [ 119.390656][ T6079] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 119.406070][ T6079] xt_socket: unknown flags 0x50 [ 119.412342][ T6079] Bluetooth: MGMT ver 1.23 [ 119.729033][ T6056] vhci_hcd: connection closed [ 119.734354][ T6054] vhci_hcd: connection closed [ 119.742246][ T6052] vhci_hcd: connection closed [ 119.750599][ T6047] vhci_hcd: connection closed [ 119.923730][ T53] vhci_hcd: stop threads [ 120.012591][ T53] vhci_hcd: release socket [ 120.024341][ T6064] vhci_hcd: connection closed [ 120.076728][ T53] vhci_hcd: disconnect device [ 120.278839][ T53] vhci_hcd: stop threads [ 120.283239][ T53] vhci_hcd: release socket [ 120.378067][ T53] vhci_hcd: disconnect device [ 120.415159][ T53] vhci_hcd: stop threads [ 120.578892][ T6072] ======================================================= [ 120.578892][ T6072] WARNING: The mand mount option has been deprecated and [ 120.578892][ T6072] and is ignored by this kernel. Remove the mand [ 120.578892][ T6072] option from the mount to silence this warning. [ 120.578892][ T6072] ======================================================= [ 120.613793][ C1] vkms_vblank_simulate: vblank timer overrun [ 120.620051][ T6072] new mount options do not match the existing superblock, will be ignored [ 120.633865][ T6072] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 "" [ 120.656211][ T53] vhci_hcd: release socket [ 120.661000][ T53] vhci_hcd: disconnect device [ 120.684042][ T53] vhci_hcd: stop threads [ 120.715144][ T53] vhci_hcd: release socket [ 120.753893][ T53] vhci_hcd: disconnect device [ 120.817565][ T53] vhci_hcd: stop threads [ 120.821958][ T53] vhci_hcd: release socket [ 120.853285][ T53] vhci_hcd: disconnect device [ 124.904965][ T6117] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 126.020701][ T6132] veth1_macvtap: left promiscuous mode [ 126.128593][ T6132] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 130.644544][ T6153] No such timeout policy "syz1" [ 133.141165][ T6157] netlink: 84 bytes leftover after parsing attributes in process `syz.2.44'. [ 133.152959][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.164862][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.684689][ T6173] xt_CT: You must specify a L4 protocol and not use inversions on it [ 141.693177][ T6207] loop7: detected capacity change from 0 to 16384 [ 141.761636][ T6210] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 4 prio class 0 [ 141.822247][ T6210] I/O error, dev loop7, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 141.832961][ T6210] Buffer I/O error on dev loop7, logical block 2, async page read [ 141.881119][ T6210] I/O error, dev loop7, sector 24 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 141.899768][ T6206] sctp: [Deprecated]: syz.1.58 (pid 6206) Use of struct sctp_assoc_value in delayed_ack socket option. [ 141.899768][ T6206] Use struct sctp_sack_info instead [ 141.926268][ T6210] Buffer I/O error on dev loop7, logical block 3, async page read [ 143.288568][ T6206] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 143.321934][ T6206] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 152.009448][ T6275] netlink: 'syz.0.77': attribute type 1 has an invalid length. [ 152.376471][ T6278] xt_bpf: check failed: parse error [ 152.441801][ T6278] bridge0: port 3(gretap0) entered blocking state [ 152.448603][ T6278] bridge0: port 3(gretap0) entered disabled state [ 152.456370][ T6278] gretap0: entered allmulticast mode [ 152.463857][ T6278] gretap0: entered promiscuous mode [ 152.471330][ T6278] bridge0: port 3(gretap0) entered blocking state [ 152.478149][ T6278] bridge0: port 3(gretap0) entered forwarding state [ 152.491877][ T6278] gretap0: left allmulticast mode [ 152.497067][ T6278] gretap0: left promiscuous mode [ 152.502297][ T6278] bridge0: port 3(gretap0) entered disabled state [ 154.195414][ T6280] lo speed is unknown, defaulting to 1000 [ 154.201488][ T6280] lo speed is unknown, defaulting to 1000 [ 154.210656][ T6280] lo speed is unknown, defaulting to 1000 [ 154.223003][ T6280] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 154.242346][ T6280] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 154.295552][ T6280] lo speed is unknown, defaulting to 1000 [ 154.302868][ T6280] lo speed is unknown, defaulting to 1000 [ 154.310510][ T6280] lo speed is unknown, defaulting to 1000 [ 154.318195][ T6280] lo speed is unknown, defaulting to 1000 [ 154.325919][ T6280] lo speed is unknown, defaulting to 1000 [ 154.332944][ T6280] lo speed is unknown, defaulting to 1000 [ 157.359453][ T6293] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 157.735041][ T6291] netlink: 8 bytes leftover after parsing attributes in process `syz.2.80'. [ 162.431189][ T6306] IPVS: Scheduler module ip_vs_sip not found [ 164.072448][ T6333] netlink: 'syz.0.90': attribute type 1 has an invalid length. [ 164.105184][ T6332] netlink: 'syz.3.89': attribute type 1 has an invalid length. [ 164.113205][ T6333] netlink: 208 bytes leftover after parsing attributes in process `syz.0.90'. [ 168.154915][ T6365] capability: warning: `syz.1.94' uses deprecated v2 capabilities in a way that may be insecure [ 169.238516][ T6370] netlink: 8 bytes leftover after parsing attributes in process `syz.2.99'. [ 174.865471][ T30] audit: type=1804 audit(1747424235.172:2): pid=6387 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.0.102" name="/newroot/22/file1" dev="fuse" ino=1 res=1 errno=0 [ 176.883472][ T5873] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 177.745757][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 177.881111][ T5873] usb 1-1: config 0 has an invalid descriptor of length 223, skipping remainder of the config [ 177.975304][ T5873] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 178.180456][ T9] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 178.197250][ T9] usb 3-1: can't read configurations, error -61 [ 178.216205][ T5873] usb 1-1: New USB device found, idVendor=046d, idProduct=08b6, bcdDevice= e.32 [ 178.512187][ T5873] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.629238][ T5873] usb 1-1: Product: syz [ 178.786002][ T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 178.804429][ T5873] usb 1-1: Manufacturer: syz [ 178.855538][ T5873] usb 1-1: SerialNumber: syz [ 178.912119][ T5873] usb 1-1: config 0 descriptor?? [ 178.948375][ T5873] usb 1-1: can't set config #0, error -71 [ 178.966200][ T9] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 178.978584][ T5873] usb 1-1: USB disconnect, device number 2 [ 179.000480][ T9] usb 3-1: can't read configurations, error -61 [ 179.029408][ T9] usb usb3-port1: attempt power cycle [ 179.663192][ T6428] veth1_macvtap: left promiscuous mode [ 179.811972][ T6428] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 180.385940][ T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 180.881138][ T9] usb 3-1: device descriptor read/8, error -71 [ 182.215475][ T6447] netlink: 'syz.2.115': attribute type 1 has an invalid length. [ 186.653169][ T6462] xt_hashlimit: size too large, truncated to 1048576 [ 189.147332][ T6453] xt_TCPMSS: Only works on TCP SYN packets [ 193.561324][ T6505] netlink: 1216 bytes leftover after parsing attributes in process `syz.1.129'. [ 193.570968][ T6505] netlink: 4436 bytes leftover after parsing attributes in process `syz.1.129'. [ 193.650903][ T6506] ceph: No mds server is up or the cluster is laggy [ 193.702677][ T978] libceph: connect (1)[c::]:6789 error -101 [ 193.709901][ T978] libceph: mon0 (1)[c::]:6789 connect error [ 193.988728][ T978] libceph: connect (1)[c::]:6789 error -101 [ 194.082303][ T978] libceph: mon0 (1)[c::]:6789 connect error [ 194.261994][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.396987][ T6522] netlink: 8 bytes leftover after parsing attributes in process `syz.3.131'. [ 198.932296][ T6549] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 199.070902][ T6544] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(11) [ 199.077577][ T6544] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 199.109735][ T6548] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(14) [ 199.116406][ T6548] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 199.701035][ T6544] vhci_hcd vhci_hcd.0: Device attached [ 199.706951][ T6548] vhci_hcd vhci_hcd.0: Device attached [ 199.913575][ T6544] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(13) [ 199.920434][ T6544] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 199.934947][ T6554] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(20) [ 199.941579][ T6554] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 199.954531][ T24] vhci_hcd: vhci_device speed not set [ 200.125654][ T6544] vhci_hcd vhci_hcd.0: Device attached [ 200.176347][ T24] usb 41-1: new full-speed USB device number 2 using vhci_hcd [ 200.602210][ T30] audit: type=1326 audit(1747424260.672:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6556 comm="syz.0.138" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f27a498e969 code=0x0 [ 200.620474][ T6554] vhci_hcd vhci_hcd.0: Device attached [ 201.195559][ T6544] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(19) [ 201.202323][ T6544] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 201.526648][ T6544] vhci_hcd vhci_hcd.0: Device attached [ 201.546233][ T6544] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 201.576641][ T6544] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 201.627590][ T6544] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 201.674269][ T6544] vhci_hcd vhci_hcd.0: port 0 already used [ 202.925199][ T6582] openvswitch: netlink: IP tunnel attribute has 44 unknown bytes. [ 204.352172][ T6569] vhci_hcd: connection closed [ 204.352961][ T6557] vhci_hcd: connection closed [ 204.355406][ T6562] vhci_hcd: connection closed [ 204.372107][ T6547] vhci_hcd: connection reset by peer [ 204.382295][ T6551] vhci_hcd: connection closed [ 204.392420][ T36] vhci_hcd: stop threads [ 204.509783][ T36] vhci_hcd: release socket [ 204.514399][ T36] vhci_hcd: disconnect device [ 204.528050][ T36] vhci_hcd: stop threads [ 204.532438][ T36] vhci_hcd: release socket [ 204.537218][ T36] vhci_hcd: disconnect device [ 204.542225][ T36] vhci_hcd: stop threads [ 204.547121][ T36] vhci_hcd: release socket [ 204.554553][ T36] vhci_hcd: disconnect device [ 204.593342][ T36] vhci_hcd: stop threads [ 204.737281][ T36] vhci_hcd: release socket [ 204.944847][ T36] vhci_hcd: disconnect device [ 204.967405][ T36] vhci_hcd: stop threads [ 204.981987][ T36] vhci_hcd: release socket [ 205.526146][ T36] vhci_hcd: disconnect device [ 205.629656][ T24] vhci_hcd: vhci_device speed not set [ 208.525530][ T978] usb usb42-port1: attempt power cycle [ 208.557054][ T6615] nvme_fabrics: missing parameter 'transport=%s' [ 208.563698][ T6615] nvme_fabrics: missing parameter 'nqn=%s' [ 209.760973][ T6637] netlink: 20 bytes leftover after parsing attributes in process `syz.1.155'. [ 209.770099][ T6637] netlink: 24 bytes leftover after parsing attributes in process `syz.1.155'. [ 210.311708][ T6638] syz.1.155: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 210.354892][ T978] usb usb42-port1: unable to enumerate USB device [ 210.383075][ T6638] CPU: 0 UID: 0 PID: 6638 Comm: syz.1.155 Not tainted 6.15.0-rc6-syzkaller-00208-g3c21441eeffc #0 PREEMPT(full) [ 210.383107][ T6638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 210.383128][ T6638] Call Trace: [ 210.383141][ T6638] [ 210.383154][ T6638] dump_stack_lvl+0x189/0x250 [ 210.383202][ T6638] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 210.383232][ T6638] ? __pfx_dump_stack_lvl+0x10/0x10 [ 210.383263][ T6638] ? __pfx__printk+0x10/0x10 [ 210.383299][ T6638] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 210.383337][ T6638] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 210.383383][ T6638] warn_alloc+0x214/0x310 [ 210.383414][ T6638] ? __pfx_warn_alloc+0x10/0x10 [ 210.383438][ T6638] ? kasan_save_track+0x4f/0x80 [ 210.383470][ T6638] ? __kmalloc_cache_noprof+0x230/0x3d0 [ 210.383504][ T6638] ? xskq_create+0x56/0x170 [ 210.383533][ T6638] ? __x64_sys_setsockopt+0x18b/0x220 [ 210.383562][ T6638] ? do_syscall_64+0xf6/0x210 [ 210.383590][ T6638] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.383626][ T6638] __vmalloc_node_range_noprof+0x125/0x12c0 [ 210.383685][ T6638] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 210.383722][ T6638] ? __kasan_kmalloc+0x93/0xb0 [ 210.383762][ T6638] vmalloc_user_noprof+0x74/0x80 [ 210.383786][ T6638] ? xskq_create+0xbf/0x170 [ 210.383811][ T6638] xskq_create+0xbf/0x170 [ 210.383842][ T6638] xsk_init_queue+0xb0/0x110 [ 210.383870][ T6638] xsk_setsockopt+0x43f/0x710 [ 210.383898][ T6638] ? __pfx_xsk_setsockopt+0x10/0x10 [ 210.383925][ T6638] ? rcu_read_unlock_special+0x3fe/0x4c0 [ 210.383955][ T6638] ? irqentry_exit+0x74/0x90 [ 210.383983][ T6638] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 210.384009][ T6638] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 210.384034][ T6638] ? __pfx_xsk_setsockopt+0x10/0x10 [ 210.384061][ T6638] do_sock_setsockopt+0x257/0x3e0 [ 210.384094][ T6638] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 210.384130][ T6638] ? __fget_files+0x3a0/0x420 [ 210.384150][ T6638] ? __fget_files+0x2a/0x420 [ 210.384181][ T6638] __x64_sys_setsockopt+0x18b/0x220 [ 210.384219][ T6638] do_syscall_64+0xf6/0x210 [ 210.384248][ T6638] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 210.384270][ T6638] ? clear_bhb_loop+0x60/0xb0 [ 210.384297][ T6638] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.384319][ T6638] RIP: 0033:0x7f4a8d58e969 [ 210.384351][ T6638] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 210.384369][ T6638] RSP: 002b:00007f4a8e33d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 210.384392][ T6638] RAX: ffffffffffffffda RBX: 00007f4a8d7b6240 RCX: 00007f4a8d58e969 [ 210.384409][ T6638] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000009 [ 210.384422][ T6638] RBP: 00007f4a8d610ab1 R08: 0000000000000052 R09: 0000000000000000 [ 210.384436][ T6638] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 210.384449][ T6638] R13: 0000000000000000 R14: 00007f4a8d7b6240 R15: 00007fff2567d388 [ 210.384485][ T6638] [ 210.384561][ T6638] Mem-Info: [ 210.693247][ T6638] active_anon:6522 inactive_anon:13705 isolated_anon:0 [ 210.693247][ T6638] active_file:5343 inactive_file:36154 isolated_file:0 [ 210.693247][ T6638] unevictable:773 dirty:390 writeback:0 [ 210.693247][ T6638] slab_reclaimable:10175 slab_unreclaimable:99866 [ 210.693247][ T6638] mapped:41844 shmem:15690 pagetables:1071 [ 210.693247][ T6638] sec_pagetables:0 bounce:0 [ 210.693247][ T6638] kernel_misc_reclaimable:0 [ 210.693247][ T6638] free:1322149 free_pcp:2573 free_cma:0 [ 210.733534][ T5901] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 210.740633][ T6638] Node 0 active_anon:26088kB inactive_anon:54820kB active_file:21060kB inactive_file:144616kB unevictable:1556kB isolated(anon):0kB isolated(file):0kB mapped:167320kB dirty:1556kB writeback:0kB shmem:61224kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11468kB pagetables:4284kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 210.781755][ T6638] Node 1 active_anon:0kB inactive_anon:0kB active_file:312kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:56kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 210.813499][ T6638] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 210.842300][ T6638] lowmem_reserve[]: 0 2504 2504 2504 2504 [ 210.848244][ T6638] Node 0 DMA32 free:1364116kB boost:0kB min:34304kB low:42880kB high:51456kB reserved_highatomic:0KB active_anon:26084kB inactive_anon:58416kB active_file:20968kB inactive_file:144604kB unevictable:1556kB writepending:1556kB present:3129332kB managed:2564584kB mlocked:20kB bounce:0kB free_pcp:6484kB local_pcp:5152kB free_cma:0kB [ 210.879961][ T6638] lowmem_reserve[]: 0 0 0 0 0 [ 210.884804][ T6638] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:4kB inactive_anon:4kB active_file:92kB inactive_file:12kB unevictable:0kB writepending:0kB present:1048580kB managed:112kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 210.911806][ T6638] lowmem_reserve[]: 0 0 0 0 0 [ 210.916679][ T6638] Node 1 Normal free:3909120kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:312kB inactive_file:0kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 210.947662][ T6638] lowmem_reserve[]: 0 0 0 0 0 [ 210.952508][ T6638] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 210.965514][ T6638] Node 0 DMA32: 29*4kB (UE) 237*8kB (UE) 240*16kB (UME) 5*32kB (ME) 31*64kB (UE) 73*128kB (UE) 21*256kB (UE) 10*512kB (U) 4*1024kB (UM) 3*2048kB (UME) 322*4096kB (UM) = 1356988kB [ 210.983698][ T6638] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 210.995463][ T6638] Node 1 Normal: 220*4kB (UME) 56*8kB (UME) 43*16kB (UE) 199*32kB (UE) 85*64kB (UME) 38*128kB (UME) 15*256kB (UM) 7*512kB (UME) 4*1024kB (UME) 2*2048kB (UE) 946*4096kB (UM) = 3909120kB [ 211.014139][ T6638] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 211.023867][ T6638] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 211.033303][ T6638] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 211.044362][ T6638] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 211.053836][ T6638] 60058 total pagecache pages [ 211.058661][ T6638] 0 pages in swap cache [ 211.062897][ T6638] Free swap = 124996kB [ 211.067291][ T6638] Total swap = 124996kB [ 211.071547][ T6638] 2097051 pages RAM [ 211.075570][ T6638] 0 pages HighMem/MovableOnly [ 211.080362][ T6638] 424246 pages reserved [ 211.084614][ T6638] 0 pages cma reserved [ 212.279590][ T5901] usb 4-1: device descriptor read/all, error -71 [ 212.566804][ T5838] Bluetooth: hci2: command 0x0406 tx timeout [ 212.578754][ T5127] Bluetooth: hci4: command 0x0406 tx timeout [ 212.584860][ T5127] Bluetooth: hci1: command 0x0406 tx timeout [ 212.673136][ T6652] sd 0:0:1:0: device reset [ 213.477318][ T6649] netlink: 4 bytes leftover after parsing attributes in process `syz.1.157'. [ 213.965042][ T6653] trusted_key: syz.2.160 sent an empty control message without MSG_MORE. [ 214.946421][ T6667] netlink: 32 bytes leftover after parsing attributes in process `syz.2.164'. [ 214.963885][ T6667] netlink: 32 bytes leftover after parsing attributes in process `syz.2.164'. [ 215.782218][ T6674] can0: slcan on ttyS3. [ 216.857658][ T6679] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 218.510977][ T6689] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 218.518925][ T6689] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 218.532222][ T6689] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 218.538388][ T6689] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 218.547101][ T6689] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 218.553166][ T6689] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 218.824176][ T6694] netlink: 'syz.3.171': attribute type 4 has an invalid length. [ 218.868950][ T6694] netlink: 'syz.3.171': attribute type 4 has an invalid length. [ 218.950849][ T5996] lo speed is unknown, defaulting to 1000 [ 219.102926][ T5996] syz0: Port: 1 Link ACTIVE [ 219.598738][ T6694] syz.3.171 (6694) used greatest stack depth: 19832 bytes left [ 220.580773][ T6710] netlink: 'syz.1.170': attribute type 1 has an invalid length. [ 220.591986][ T5821] Bluetooth: hci4: command 0x0406 tx timeout [ 220.605580][ T5825] Bluetooth: hci2: command 0x0406 tx timeout [ 220.612099][ T5825] Bluetooth: hci1: command 0x0406 tx timeout [ 221.065102][ T6712] netlink: 32 bytes leftover after parsing attributes in process `syz.4.172'. [ 222.646538][ T5821] Bluetooth: hci1: command 0x0406 tx timeout [ 222.652756][ T5821] Bluetooth: hci2: command 0x0406 tx timeout [ 222.662195][ T5836] Bluetooth: hci4: command 0x0406 tx timeout [ 224.744921][ T71] Bluetooth: (null): Too short H5 packet [ 224.836840][ T71] Bluetooth: (null): Invalid header checksum [ 225.178868][ T71] Bluetooth: (null): Invalid header checksum [ 225.185154][ T71] Bluetooth: (null): Invalid header checksum [ 226.347360][ T71] Bluetooth: (null): Invalid header checksum [ 226.535626][ T71] Bluetooth: (null): Invalid header checksum [ 226.556038][ T71] Bluetooth: (null): Invalid header checksum [ 226.569845][ T71] Bluetooth: (null): Invalid header checksum [ 226.586899][ T71] Bluetooth: (null): Invalid header checksum [ 226.593115][ T71] Bluetooth: (null): Invalid header checksum [ 226.672053][ T71] Bluetooth: (null): Invalid header checksum [ 226.699763][ T71] Bluetooth: (null): Invalid header checksum [ 226.744111][ T71] Bluetooth: (null): Invalid header checksum [ 226.772686][ T71] Bluetooth: (null): Invalid header checksum [ 226.808872][ T71] Bluetooth: (null): Invalid header checksum [ 226.848165][ T6750] 9pnet_fd: Insufficient options for proto=fd [ 226.917442][ T71] Bluetooth: (null): Invalid header checksum [ 227.929891][ T71] Bluetooth: (null): Invalid header checksum [ 228.187162][ T71] Bluetooth: (null): Invalid header checksum [ 228.193415][ T71] Bluetooth: (null): Invalid header checksum [ 228.310572][ T71] Bluetooth: (null): Invalid header checksum [ 232.686608][ T6767] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 232.903650][ T6786] netlink: 'syz.0.188': attribute type 4 has an invalid length. [ 233.447520][ T6789] syz.1.191 (6789) used greatest stack depth: 18168 bytes left [ 236.125401][ T5821] Bluetooth: hci4: command 0x0406 tx timeout [ 236.694538][ T978] Process accounting resumed [ 238.471024][ T30] audit: type=1800 audit(1747424298.762:4): pid=6814 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.199" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=10489 res=0 errno=0 [ 238.501841][ C0] vkms_vblank_simulate: vblank timer overrun [ 238.510022][ T6825] syz.0.202 uses obsolete (PF_INET,SOCK_PACKET) [ 239.515663][ T5836] Bluetooth: hci4: connection err: -111 [ 241.012645][ T6839] netlink: 252 bytes leftover after parsing attributes in process `syz.0.202'. [ 241.436139][ T6841] nbd3: detected capacity change from 0 to 12 [ 241.519026][ T5870] block nbd3: Send control failed (result -89) [ 242.084130][ T6850] netlink: 4 bytes leftover after parsing attributes in process `syz.4.205'. [ 242.553873][ T5870] block nbd3: Request send failed, requeueing [ 242.564357][ T5982] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 242.574016][ T5982] Buffer I/O error on dev nbd3, logical block 0, async page read [ 242.577038][ T6841] block nbd3: shutting down sockets [ 242.586526][ T5870] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 242.598833][ T5870] Buffer I/O error on dev nbd3, logical block 0, async page read [ 242.609075][ T5870] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 242.649086][ T5870] Buffer I/O error on dev nbd3, logical block 0, async page read [ 242.709219][ T5982] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 242.723049][ T5982] Buffer I/O error on dev nbd3, logical block 0, async page read [ 242.845393][ T5870] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 242.861452][ T5870] Buffer I/O error on dev nbd3, logical block 0, async page read [ 242.871643][ T5870] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 242.884493][ T5870] Buffer I/O error on dev nbd3, logical block 0, async page read [ 243.567121][ T6850] syz_tun: entered promiscuous mode [ 243.572811][ T6850] macvtap1: entered promiscuous mode [ 243.586120][ T5870] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 243.596130][ T5870] Buffer I/O error on dev nbd3, logical block 0, async page read [ 243.822898][ T6850] macvtap1: entered allmulticast mode [ 243.834329][ T5870] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 244.231198][ T5870] Buffer I/O error on dev nbd3, logical block 0, async page read [ 244.555038][ T5870] ldm_validate_partition_table(): Disk read failed. [ 244.616658][ T6850] syz_tun: entered allmulticast mode [ 244.632121][ T5870] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 244.805731][ T5870] Buffer I/O error on dev nbd3, logical block 0, async page read [ 244.813805][ T5870] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 244.865466][ T5870] Buffer I/O error on dev nbd3, logical block 0, async page read [ 244.873793][ T5870] Dev nbd3: unable to read RDB block 0 [ 245.818401][ T6867] Falling back ldisc for ptm1. [ 245.921556][ T5870] nbd3: unable to read partition table [ 245.927472][ T5870] nbd3: partition table beyond EOD, truncated [ 245.952273][ T5870] ldm_validate_partition_table(): Disk read failed. [ 246.254516][ T6849] syz_tun: left allmulticast mode [ 246.271978][ T5870] Dev nbd3: unable to read RDB block 0 [ 246.285628][ T6849] syz_tun: left promiscuous mode [ 246.323151][ T5870] nbd3: unable to read partition table [ 246.345716][ T5870] nbd3: partition table beyond EOD, truncated [ 246.590920][ T6874] netlink: 8 bytes leftover after parsing attributes in process `syz.1.211'. [ 249.345754][ T6895] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 249.372278][ T6895] CIFS mount error: No usable UNC path provided in device string! [ 249.372278][ T6895] [ 249.382589][ T6895] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 252.440967][ T6898] capability: warning: `syz.4.218' uses 32-bit capabilities (legacy support in use) [ 256.252282][ T6933] netlink: 4 bytes leftover after parsing attributes in process `syz.3.224'. [ 256.263600][ T6933] netlink: 4 bytes leftover after parsing attributes in process `syz.3.224'. [ 256.277251][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 259.761834][ T6946] netlink: 4 bytes leftover after parsing attributes in process `syz.3.226'. [ 259.770901][ T6946] netlink: 4 bytes leftover after parsing attributes in process `syz.3.226'. [ 264.524973][ T6971] hfsplus: unable to find HFS+ superblock [ 265.692299][ T6964] lo speed is unknown, defaulting to 1000 [ 266.308025][ T6986] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 267.206323][ T31] INFO: task kworker/1:7:6060 blocked for more than 143 seconds. [ 267.487062][ T31] Not tainted 6.15.0-rc6-syzkaller-00208-g3c21441eeffc #0 [ 267.494831][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 267.545534][ T31] task:kworker/1:7 state:D stack:25216 pid:6060 tgid:6060 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 267.558047][ T31] Workqueue: usb_hub_wq hub_event [ 267.563153][ T31] Call Trace: [ 267.567400][ T31] [ 267.570385][ T31] __schedule+0x168f/0x4c70 [ 267.575040][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 267.612232][ T31] ? schedule+0x165/0x360 [ 267.617126][ T31] ? __pfx___schedule+0x10/0x10 [ 267.622620][ T31] ? schedule+0x91/0x360 [ 267.627188][ T31] schedule+0x165/0x360 [ 267.632676][ T31] schedule_preempt_disabled+0x13/0x30 [ 267.638637][ T31] __mutex_lock+0x724/0xe80 [ 267.643309][ T31] ? __mutex_lock+0x51b/0xe80 [ 267.648210][ T31] ? hub_event+0x21cb/0x4a00 [ 267.652907][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 267.661315][ T31] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 267.670464][ T31] hub_event+0x21cb/0x4a00 [ 267.675035][ T31] ? __lock_acquire+0xaac/0xd20 [ 267.680097][ T31] ? do_raw_spin_lock+0x121/0x290 [ 267.870478][ T31] ? __pfx_hub_event+0x10/0x10 [ 267.915197][ T31] ? process_scheduled_works+0x9ec/0x17a0 [ 268.297138][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 268.302454][ T31] ? process_scheduled_works+0x9ec/0x17a0 [ 268.311278][ T31] ? process_scheduled_works+0x9ec/0x17a0 [ 268.320018][ T31] process_scheduled_works+0xadb/0x17a0 [ 268.326364][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 268.333019][ T31] worker_thread+0x8a0/0xda0 [ 268.338131][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 268.345151][ T31] ? __kthread_parkme+0x7b/0x200 [ 268.350536][ T31] kthread+0x70e/0x8a0 [ 268.428971][ T31] ? __pfx_worker_thread+0x10/0x10 [ 268.724740][ T31] ? __pfx_kthread+0x10/0x10 [ 268.749684][ T31] ? __pfx_kthread+0x10/0x10 [ 268.754700][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 268.764742][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 268.770842][ T31] ? __pfx_kthread+0x10/0x10 [ 268.778711][ T31] ret_from_fork+0x4b/0x80 [ 268.790967][ T31] ? __pfx_kthread+0x10/0x10 [ 268.941382][ T31] ret_from_fork_asm+0x1a/0x30 [ 268.946377][ T31] [ 268.966577][ T31] [ 268.966577][ T31] Showing all locks held in the system: [ 268.987379][ T31] 2 locks held by kworker/u8:1/13: [ 269.102518][ T31] #0: ffff8880b88399d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xad/0x140 [ 269.124082][ T31] #1: ffffc90000127c60 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ec/0x17a0 [ 269.474457][ T7006] openvswitch: netlink: Actions may not be safe on all matching packets [ 269.481695][ T31] 1 lock held by khungtaskd/31: [ 269.490090][ T31] #0: ffffffff8df3dce0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 269.542193][ T7007] 9pnet_fd: Insufficient options for proto=fd [ 269.624254][ T31] 5 locks held by kworker/1:1/47: [ 269.629848][ T31] #0: ffff888021a9f948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b1/0x17a0 [ 269.642204][ T31] #1: ffffc90000b87c60 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ec/0x17a0 [ 269.654658][ T31] #2: ffff88823beb2998 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a00 [ 269.765858][ T31] #3: ffff888028bbd510 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x21a3/0x4a00 [ 269.779243][ T31] #4: ffff88802731d368 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21cb/0x4a00 [ 269.789472][ T31] 3 locks held by kworker/u8:3/53: [ 269.795620][ T31] 2 locks held by kworker/u8:5/83: [ 269.800873][ T31] #0: ffff8880222bf948 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x9b1/0x17a0 [ 269.812333][ T31] #1: ffffc9000220fc60 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ec/0x17a0 [ 269.826392][ T31] 2 locks held by getty/5578: [ 269.833716][ T31] #0: ffff888030fd30a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 269.843796][ T31] #1: ffffc9000333b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 269.854476][ T31] 5 locks held by kworker/1:7/6060: [ 269.859969][ T31] #0: ffff888021a9f948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b1/0x17a0 [ 269.871449][ T31] #1: ffffc9000aedfc60 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ec/0x17a0 [ 269.883411][ T31] #2: ffff888028be0198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a00 [ 269.892623][ T31] #3: ffff888028be3510 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x21a3/0x4a00 [ 269.902783][ T31] #4: ffff88802731d368 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21cb/0x4a00 [ 269.912630][ T31] 2 locks held by syz.1.229/6964: [ 269.917829][ T31] #0: ffffffff8f2d8490 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x317/0x590 [ 269.931066][ T31] #1: ffffffff8df437b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b7/0x730 [ 269.945110][ T31] 2 locks held by dhcpcd/7000: [ 269.950790][ T31] #0: ffff8880598b8e08 (&sb->s_type->i_mutex_key#10){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 269.963553][ T31] #1: ffffffff8df437b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b7/0x730 [ 270.000029][ T31] [ 270.002436][ T31] ============================================= [ 270.002436][ T31] [ 270.051154][ T31] NMI backtrace for cpu 0 [ 270.051173][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc6-syzkaller-00208-g3c21441eeffc #0 PREEMPT(full) [ 270.051198][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 270.051210][ T31] Call Trace: [ 270.051218][ T31] [ 270.051227][ T31] dump_stack_lvl+0x189/0x250 [ 270.051261][ T31] ? __wake_up_klogd+0xd9/0x110 [ 270.051288][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 270.051317][ T31] ? __pfx__printk+0x10/0x10 [ 270.051365][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 270.051392][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 270.051411][ T31] ? _printk+0xcf/0x120 [ 270.051449][ T31] ? __pfx__printk+0x10/0x10 [ 270.051485][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 270.051509][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 270.051535][ T31] watchdog+0xfee/0x1030 [ 270.051564][ T31] ? watchdog+0x1de/0x1030 [ 270.051599][ T31] kthread+0x70e/0x8a0 [ 270.051628][ T31] ? __pfx_watchdog+0x10/0x10 [ 270.051653][ T31] ? __pfx_kthread+0x10/0x10 [ 270.051680][ T31] ? __pfx_kthread+0x10/0x10 [ 270.051712][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 270.051737][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 270.051763][ T31] ? __pfx_kthread+0x10/0x10 [ 270.051786][ T31] ret_from_fork+0x4b/0x80 [ 270.051806][ T31] ? __pfx_kthread+0x10/0x10 [ 270.051830][ T31] ret_from_fork_asm+0x1a/0x30 [ 270.051880][ T31] [ 270.051888][ T31] Sending NMI from CPU 0 to CPUs 1: [ 270.203651][ C1] NMI backtrace for cpu 1 [ 270.203667][ C1] CPU: 1 UID: 0 PID: 5804 Comm: syz-executor Not tainted 6.15.0-rc6-syzkaller-00208-g3c21441eeffc #0 PREEMPT(full) [ 270.203690][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 270.203701][ C1] RIP: 0010:__rb_reserve_next+0x2b0/0xdb0 [ 270.203729][ C1] Code: ff 4c 8b 7c 24 08 4c 89 fe e8 cc 61 fc ff 4d 85 ff 0f 84 d4 00 00 00 48 b8 00 00 00 00 00 fc ff df 48 8b 4c 24 48 80 3c 01 00 <4c> 8b 7c 24 38 74 08 4c 89 ff e8 71 30 5c 00 4d 8b 3f 48 b8 00 00 [ 270.203745][ C1] RSP: 0018:ffffc900043af118 EFLAGS: 00000046 [ 270.203761][ C1] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 1ffff92000875e55 [ 270.203774][ C1] RDX: 0000000000000000 RSI: 00000000000001b8 RDI: 0000000000000000 [ 270.203785][ C1] RBP: ffff88801aef6948 R08: ffff88801aef6947 R09: 1ffff110035ded28 [ 270.203799][ C1] R10: dffffc0000000000 R11: ffffed10035ded29 R12: 0000003ee954afda [ 270.203812][ C1] R13: ffffc900043af2b0 R14: ffffc900043af298 R15: 00000000000001b8 [ 270.203825][ C1] FS: 0000555561a4e500(0000) GS:ffff8881261f9000(0000) knlGS:0000000000000000 [ 270.203841][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 270.203853][ C1] CR2: 0000001b2f806ff8 CR3: 00000000328f4000 CR4: 00000000003526f0 [ 270.203869][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 270.203879][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 270.203890][ C1] Call Trace: [ 270.203896][ C1] [ 270.203918][ C1] ring_buffer_lock_reserve+0xbb5/0x1010 [ 270.203955][ C1] ? rb_commit+0x781/0x7e0 [ 270.203990][ C1] trace_event_buffer_lock_reserve+0x1d0/0x6f0 [ 270.204019][ C1] ? tracing_gen_ctx_irq_test+0xc6/0x160 [ 270.204048][ C1] trace_event_buffer_reserve+0x2a6/0x3d0 [ 270.204081][ C1] ? __pfx_trace_event_buffer_reserve+0x10/0x10 [ 270.204115][ C1] trace_event_raw_event_bpf_trace_printk+0x100/0x260 [ 270.204142][ C1] ? __pfx_trace_event_raw_event_bpf_trace_printk+0x10/0x10 [ 270.204170][ C1] ? __asan_memcpy+0x40/0x70 [ 270.204194][ C1] ? bstr_printf+0xa7c/0xb70 [ 270.204215][ C1] trace_bpf_trace_printk+0x170/0x1d0 [ 270.204237][ C1] bpf_trace_printk+0x11e/0x190 [ 270.204264][ C1] ? __pfx_bpf_trace_printk+0x10/0x10 [ 270.204290][ C1] ? bpf_trace_run1+0x181/0x4b0 [ 270.204317][ C1] bpf_prog_0605f9f479290f07+0x38/0x40 [ 270.204334][ C1] bpf_trace_run1+0x27c/0x4b0 [ 270.204352][ C1] ? bpf_trace_run1+0x181/0x4b0 [ 270.204371][ C1] ? __pfx_bpf_trace_run1+0x10/0x10 [ 270.204392][ C1] ? __bpf_trace_rcu_utilization+0x94/0xf0 [ 270.204423][ C1] __bpf_trace_rcu_utilization+0xa1/0xf0 [ 270.204451][ C1] ? __pfx___bpf_trace_rcu_utilization+0x10/0x10 [ 270.204480][ C1] ? rcu_qs+0xc4/0x170 [ 270.204504][ C1] ? __pfx_rcu_qs+0x10/0x10 [ 270.204533][ C1] trace_rcu_utilization+0x1ad/0x1d0 [ 270.204561][ C1] rcu_note_context_switch+0xdc1/0x1140 [ 270.204586][ C1] ? __local_bh_enable_ip+0x12d/0x1c0 [ 270.204614][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 270.204637][ C1] ? __local_bh_enable_ip+0x12d/0x1c0 [ 270.204669][ C1] ? __lock_acquire+0xaac/0xd20 [ 270.204697][ C1] ? __pfx_rcu_note_context_switch+0x10/0x10 [ 270.204723][ C1] ? rcu_is_watching+0x15/0xb0 [ 270.204751][ C1] __schedule+0x326/0x4c70 [ 270.204773][ C1] ? ktime_get+0x3e/0x1f0 [ 270.204789][ C1] ? ktime_get+0x3e/0x1f0 [ 270.204807][ C1] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 270.204826][ C1] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 270.204846][ C1] ? schedule+0x165/0x360 [ 270.204868][ C1] ? __pfx___schedule+0x10/0x10 [ 270.204897][ C1] ? schedule+0x91/0x360 [ 270.204918][ C1] schedule+0x165/0x360 [ 270.204938][ C1] do_nanosleep+0x1c7/0x600 [ 270.204964][ C1] ? do_nanosleep+0x7f/0x600 [ 270.204981][ C1] ? __pfx_do_nanosleep+0x10/0x10 [ 270.205000][ C1] ? __hrtimer_setup+0x187/0x210 [ 270.205024][ C1] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 270.205043][ C1] hrtimer_nanosleep+0x169/0x360 [ 270.205074][ C1] ? __pfx_hrtimer_nanosleep+0x10/0x10 [ 270.205103][ C1] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 270.205119][ C1] ? __pfx_get_timespec64+0x10/0x10 [ 270.205142][ C1] ? __rseq_handle_notify_resume+0x37e/0x11f0 [ 270.205168][ C1] __se_sys_clock_nanosleep+0x2ee/0x380 [ 270.205194][ C1] ? __pfx___se_sys_clock_nanosleep+0x10/0x10 [ 270.205221][ C1] ? do_syscall_64+0xba/0x210 [ 270.205246][ C1] do_syscall_64+0xf6/0x210 [ 270.205270][ C1] ? clear_bhb_loop+0x60/0xb0 [ 270.205293][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.205313][ C1] RIP: 0033:0x7efecb9c11e3 [ 270.205330][ C1] Code: 1f 84 00 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d 5e 33 1c 00 00 74 14 b8 e6 00 00 00 0f 05 d8 c3 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 [ 270.205347][ C1] RSP: 002b:00007ffc4e005498 EFLAGS: 00000202 ORIG_RAX: 00000000000000e6 [ 270.205367][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007efecb9c11e3 [ 270.205381][ C1] RDX: 00007ffc4e0054b0 RSI: 0000000000000000 RDI: 0000000000000000 [ 270.205394][ C1] RBP: 0000000000000000 R08: 00000000208d15e4 R09: 7fffffffffffffff [ 270.205407][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffc4e005900 [ 270.205419][ C1] R13: 0000000000000004 R14: 00007ffc4e0054ec R15: 00007ffc4e005580 [ 270.205441][ C1] [ 270.210108][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 270.210129][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc6-syzkaller-00208-g3c21441eeffc #0 PREEMPT(full) [ 270.210157][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 270.210172][ T31] Call Trace: [ 270.210181][ T31] [ 270.210193][ T31] dump_stack_lvl+0x99/0x250 [ 270.210229][ T31] ? __asan_memcpy+0x40/0x70 [ 270.210261][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 270.210293][ T31] ? __pfx__printk+0x10/0x10 [ 270.210345][ T31] panic+0x2db/0x790 [ 270.210383][ T31] ? __pfx_panic+0x10/0x10 [ 270.210410][ T31] ? tick_nohz_tick_stopped+0x86/0xb0 [ 270.210455][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 270.210481][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 270.210516][ T31] watchdog+0x102d/0x1030 [ 270.210548][ T31] ? watchdog+0x1de/0x1030 [ 270.210585][ T31] kthread+0x70e/0x8a0 [ 270.210617][ T31] ? __pfx_watchdog+0x10/0x10 [ 270.210645][ T31] ? __pfx_kthread+0x10/0x10 [ 270.210673][ T31] ? __pfx_kthread+0x10/0x10 [ 270.210707][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 270.210733][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 270.210763][ T31] ? __pfx_kthread+0x10/0x10 [ 270.210789][ T31] ret_from_fork+0x4b/0x80 [ 270.210811][ T31] ? __pfx_kthread+0x10/0x10 [ 270.210837][ T31] ret_from_fork_asm+0x1a/0x30 [ 270.210891][ T31] [ 270.852913][ T31] Kernel Offset: disabled [ 270.857237][ T31] Rebooting in 86400 seconds..