last executing test programs: 32m40.429369489s ago: executing program 32 (id=322): socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x80c0}, 0x880) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x2}, 0x20) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000280)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0xffff, 0x2, 0x0, {0xa, 0x0, 0xfffffffe, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x400}}}, 0x32) sendmmsg(r2, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) connect$inet6(r1, &(0x7f0000000440)={0xa, 0x4e01, 0x3, @empty, 0x10000004}, 0x1c) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000180)=ANY=[@ANYBLOB="b8000000190001002bbd700000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000003c00000000000000ffffffffffffffff000000000020000000000000000000000000000000000000000a0000000000009e83000000000000020000000000000801000000000000000101"], 0xb8}}, 0x0) close(0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000001435010026bd0c333c84df250a4022fe", @ANYRES32, @ANYBLOB="140006"], 0x40}, 0x1, 0x0, 0x0, 0x811}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x40, 0x14, 0x509, 0x70bd27, 0x25dfdbfd, {0x2, 0x1f, 0x80, 0xcb}, [@IFA_BROADCAST={0x8, 0x4, @rand_addr=0x64010100}, @IFA_LOCAL={0x8, 0x2, @local}, @IFA_LOCAL={0x8, 0x2, @broadcast}, @IFA_RT_PRIORITY={0x8, 0x9, 0x6}, @IFA_RT_PRIORITY={0x8, 0x9, 0xffffffff}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x800, 0x0, 0x0) 31m48.919033393s ago: executing program 2 (id=399): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000240), 0x8) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1900000004000000", @ANYBLOB="0000000000000000000000000000000000000000e25e8ee604aad9978ab5595654f833e281824783b388db855481d174fe0e1840f23d21845f39980e4ef81733e7906beda671da6d4de08e65d19851fad673898a388c5a96ad2133ba65b6deb201c9e35569c835a7e9fac23f9203cccb2f8669ef9b08c28a4bc48b7a8233ffcf5245331c0a365be0d29564c9e7159dafacc57d839bcdfb5a57340fd0b54cb1db4357721cde0f3fabc42529a233e1e673d3554ac0c38caedf743fa66f16c0d216a3cfb1d3e4440ecc49e119602c3e5e3cd5aebdd1cdf4b6ea9c6fda8cdb5c2a7111c8118712b5d4152b85242237d5", @ANYRES32=0x0, @ANYRES32], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, 0x0, 0x0) sendmsg$inet(r3, 0x0, 0x48c0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) r4 = fanotify_init(0x200, 0x0) fanotify_mark(r4, 0x1, 0x3a, r1, 0x0) r5 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = dup(r11) syz_ublk_setup_queues(r12, 0x0, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x952b, 0x0, 0x0, 0x19, 0x0, r12}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1ed4, 0x1, 0x3, 0x2ab, 0x0, r12}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6366, 0x2000, 0x1, 0x387, 0x0, r12}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9cee, 0x4, 0x2, 0x113}}], 0x4, &(0x7f0000001d00)={0x2e, 0x41, 0x0, r12, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x1}, 0x0, r9, '\x00', {0x1, 0x7d1, 0x0, &(0x7f0000000d00)=@buf_max_buf="6f6ad335fea0243b55289f7e69c3d01569ac72de01eed16641a74094dc0bfef519e9f5df727862351ff66fd64448fe375768442137317176b85425e4fe58af8d2297dc0a822d67a64aff1640d6d42ffe803b5323ec5fade58c4c0bbab5650c93978aa3835d65354e83f35798e8a650e01adb69c67f15d82735f628c73948ec9696ae399ad5f13f7196019434e03005556f2cfe9ee685fa6c135fa33486fd00066a58098cdbfea63a42b3a1c737b5f817b464754d9d3d3fa31e1a2ea0c125997fad68816a643f13f94ce435c294c34ec46bec16586a3467d33ea72fe254d3c7109929ff807be7c5fa82a2b3ddd0c8d95ee9aec02786b8b8be3f17f8a174b4a0aac0dea413a3b171c56c69cc167e07158640fbde3fe7ee6bd11a87fa8b136238ed16960394ddae8202c9f0977a28764ae78c55fe069efc221ec777809ffbf9fe517510e41e16f741ab6079bac8f526205cfe266c3029db23015fc5be00796087811a0a440e12d11f0da26ea13b3356fd251579ee03a5a0470939fbff0697d106a0f153822e4a4e5c52decc14f310f6d23278cabcdc7843afe4f129b634a97af962f5914e7af7624a11d1e41b46028792bddebd2e05d18e79d7078fd7bd9d95db339048e4bcd37f3f19c1aef896b9c2577ed032a0c3fd105791f2b4c90b6fb523aa0dbd21c00f80d4ab9864ee811e35147de6431f8a5360deb9d8bd2b8860a8d7cebe7679e7c25a0a12089bca51f21247a7ffece4a652ef40852e3946a4c7d29775c13d3ba195f11c8bee4708b8279ed83fb5c0902998c39993c52686c7dd9577d4d771dec71175c38912c38cd290e9a9e94d6459a72aa25e8824beb18ac0d95c8fc7d25b6ad04e17792afe4428c34975f12d8ce945fde33761b4e2037d47314b160e0b58617b08d567ffa9d1444e95085e093675ba60bcc514a604b0134bbf84f4ca54d53e09dfe9fae3076a8c08d8787a9e49b43adaa548d75edc9ed1ab0e1b294782418c6a07ddfdcb5e28bf64ed76f50ff90f63d1aba6740fea7532dfa658ed2d09cd75b53c81ee9286e9aa3b740a92d60b5c074609ede70b3b99747f1f3b7ed5f0cffb89f99b216c7a84623d59bf8c3234c4172401fe292d373b8c768c91f50f805748e665e88d6964fbdb6815960362d796a6d5fcc45b331e2a5c8ceeae7269b5410b105dbd1b357903568fb7f4608298986580c93403a00a65008730936ac8f178fd599c67cbf1f1d43091d55f9d8ba51142593c1f3201248a588bfb368b873021c6f380e501514c5d2bf49219d86c0d12f75d9d279cdf8048cd3d4de67e6eed558cb2a168258d61cca53a6c1c821a3684ff1a2de149bfa207e3ed905a9384e257c70bf9b2ea45ff18d227a83431a33585e72cb21116f8cb65bf906b8d674991285ab12dfe854024dd8628b2d9d0b7e9e545b96420731849bb922435d7ff232586536a901bbecc26819cfc11dc1a3c04f5a18a02d1a2b1443822f8198c4fd416f09796641abfd826cef54ecd0b6127b04354583ef7db42326f6b908bbfa3c08398a526aaa75cc021a04992a06c95b58840946bef1796d9600164fe6785b2d7fc7f5abf8bdc3d9e6b5b5713cfd89257ac98caec9a21950538969c02294b20dac646a63375c80e7909dcb1f6633bec4c1859b9898d13ab28d7133bc06b66f0494ad5236c212639606b53d8b6e73634e2c895802e112a8ce43feb8d7f96fce45475a1544e32a60c4804caca2c638287206d2755aa435a67cd487d600473bf423cfb9600ef011a10c0ca0fb45599c9969ebe4c88167741a489f1382946aca6a4248d28ef25a35f047a82d5c36b9daf7549d86060f8b2677a9b6bf72dab173b239c7d9060a967009d01d9039c0f6e0f9b49e479c2433dd929aa4e58ae9ca6ba386bf526f890da2c8a612bdcabe09a1d96af1c8bdeaf1392b29759961f68ce1f41858584c98e071184105dc33fbdbdf3b7e79b13a45bbdb40974daf7d2e4a4c4e812aef47e30d5288bf90113feb1992cadf8706c1ca2f7d1fb2da466689fa5d5a4a28d236a1747a849242c2da3f2b5cce988e2b055eda124c743c56cda094952fe255ac5ee1d95dd1b7eb86f7c62de33878965b7fb916d64a831d25c55c663ee09b841341bd59045abb32a7472f21d4c2b504ef3f49e179ef99108974d013c173884f34afe2a7f9dcf0656977296632fc0dba98c431c07ec1fa68165c353c5303457a09f6c59ab9dad7ab43d1ed5df48de592164bd13ba7ef868669994079dd6592d723e2bef42c3194e87d4816076777222503adf5db14d44d31dbe01e0b79a41bb3670f66ecbd15ed819f5923145e85b457b270ecb5fa9c2c84980bb594a0dc8ced733aa08767d8c3043cf459fef06ec9856024dbc28b06abd696ca389713ded31901693c64a54911dcdedf9090b3b8b2de2228f5a2edd81a926902b0a7767a3e5083c6fe0cadec3329f1d7fa9e1dbaaabbd24b1883e2be253145572a6adff0e4ed00beb70597cdeb20d8353b901503b2111fbbda8e93c6d83c76635dd590d967625726015c550ff65e4e14d353770f90019747810540c810ef1e31609924783367dfeda75c3133423704c9226d54d50a27ff64ab0b4126af5f8144192942185daf02254bf2dcb3ec3771aef2dd134741879fb55a331e64c0a86b11b2e061a9b004b3f6083bcb5c7c6a9e0299e902ce3191c9669a9d6456cc9d046a0a96c6884d9d6dbd075ccfdab9ccbe58f2a69e557ac489a77e7e2a027da88f16cec5a2871e1be4f9327e8b212959a144d3ea707ed09bc6ec5a658fceceab3ed56c7284dc011b1abb0966bb2eedf6d664ee9fe2f4e3ef9ac982d94d4539d297101236ecaee58a03b5586b0ca25e36612060cd25bf87fbaedaee34154a982187623f98ea5f2c9457c120451326199b06a58eaaa429678267b60013a8c94c4d1bfeb9787369554c508910eed708a3a7e6e46f43c19d1e9ee788f48d96b440680c613f515df0592d69accdaf560c6956a6a075fdec072d3cde4c16b5e275c475bc51b2c4409b868627826d44000eda3a1f8477e5dc7f6458c8e5c676fdb5b492c6c34efcfc58384b888f0144683c02007ef1c7ff24ac2a63e94ef8bf3c46511365fed2c00c213caea7389b9aafbeeafaf0a51e263cd4ac11c9dac44742d852f539bf504d9e8c32379b3dd9078b7d505e0451e9bb084933b39bf7710402d7a375f29bf99f7c6fd2672a3b50faa2104966d6f11f0295a62445bedf77d371b888e500a9b784abf8c88954db3f937d371777011802f341ad2d4ebd4d641e2d3dc872adc75d0524d289eb5965b2ae0febf34e25069cd7332e253787791d039cfc39e8ff014f4f44b67a2f5dae9e8c4b71d528ad47f14455001178d9343b51762e38dfb9f48616d743798462efa86bc5d8c4128a8fa539c3e0ad2dcdb887be0c10fdf87b801d9c6e1fe734367031f7aa4ffcc96be920a3c1f67027b0338a427b079b8354881b1a17725b2c892531d563188dd2c258dbe6074da8cc53f16bba0f7067560ca3858fdffcd96017c2069fa3cf42f107d3a8631bc01e0bae35cb4d6e580a64c81ef8a04355d69170a34430debc9461def53297f4f7245c0e98a98afd2fb8c87da5b6b189b3b2093ef14e02f4ab022a29e49428037c949f75bf40cf523be2564c6d9a87cf52c83809c6b41f4d0b349ee79c573ffa18c214b4dc3f0fe339ce9a5e374d797618b828ecefe429a5fb32ab096fde74fecca228fa4bd2b3c6d3a36c9adcd0eba381a4793a09894e778fb93f75489f2a303ed5e13a62f351250225d011440818a3292d0db6dea76eb6bfc8d4dcdac3ef398caecebd2b0dd8bbfab7f92a9b4a7ea41b23d9d47dd2d04ed46e3223da85f71144bf39789feb244b278e3a24851d1c818dd3d05eb1457bb8d9aa86ea8489620f3445a245ee390455686209b446c094bb541ba68aaf7a237960687956801e2d5c6db9bfd0795280873fdffa60a1b53eb92195db94aa235939e81aa96d9bcbf39635c57be4034890db57a04be98a2222a445b43fcd5ec6cc3cb299e6a83628a2c0f306542f7acac6f6e071372ae12bd3afdc7fec4015c6e1102c90a58b7d49e32f9a5e76f864b355d22ed04354c0f47a7dc755f70439df5feaee4aa4849dc01298d0d061b69e17a67c300256f6d25dc40cca2a2f56fd01033d28404ae6ae1b3b46c850b476c3d2346af098b7e62c1a1895b3ac0c6d5ba7495a911355311befaf8ec5840d1e0fdf58fe87a42836a9e15d4a9ad91219110ba0fd1f4a18c9c9bee10d3ebb9188e66f518cb6c21606f820f771e6787c2287d5e3545221cdf2d4fa829b2b7bcbda14f1f53b14f3bd01619a359fa79a42e5124eb5a9051292533c97bc8c51fde9cd005422c9a13e274cf31babe07f95ed4dfa92ec502e48a82f91ed3de2c2415265989c252447175205a0d67bf8a794870773bba9738b52502c6d7910cad4288e84f990c400c8f51e4b423ed396d1a39d684677b800e4590a27e8f8f7f70266cba64509318bcd3497122f259f655118da287abd64b1b0dee9e35e1257dcdedeef0b95fce43d0bb2ae8224278153fef14d945aed882f9d9ba227b4a118e547dca648400f7e2cfe0dae2212079321233ebe06974e46d8b7b72960d5d4118c207c03851c7230b312ff5b5cc1e2621a2a3c627020452601558baef0dae75a7420b535a7206091de0c5b4c694d539e9dbf055049bcf540c9a95717878768bb8a5ee102e2c03689dd273f37177059294a50325cab127c1d0c743818abd6551ad03611ebcb86fef844b2280cfee026a8820e68dc01efcc15958cc07dd223ce32e9b25774f059f432d94385b2f1d19c224250afcd28a842daac2b7252aa0735c5196c5d8790a0d7531fa12042845a0bad3dbb42342a6d1145e425b3eccd3ac1f6827bb54844f331a45532e809cb1f21b2244ccb2ef4c2770d10dda13e1bcc17472bb265f9b247b0bfa70fe0e0731c3f1ee03b3ee0e0179fea6c77a2824be2349063f184e55c2e4dca86eb1ebe0bce99d0ebb64fd2f0861faf58f36dd609780d293a7adea3365264a016aa1d61db1af38d1e202d22814e79bb32f1519c6848ecd25421cc13501905f3c87dc18dc168d4b3465370fa23ee7133a9174ff900d651565805f1cb331a6408c3ce8a4f10dccdd6f158b24463a16a534a76802ae1e972b1d40dda42e0f3d4f72a8939c1df7c595dea73f54c973f0f9d37ebe5e8ff999e2884304a7ccd8cdb0c8bda42cf55b5a32634af59ab72339d377168595fd47197fe6f8f1da7ccb692358d0b77b98da3b6ca9e2702bcbbf09cb53fa7830467342ffc865ccb4018959687d605ebec804aafae28cf4fce303a0fb193f00a18c96c0436214706e535e9492bb7910eb4b16171a9e17cdbad600982ff7b55c4f21c1e1666bfba954b68ed7a5cbb0ba1e00a210951282bc8730e13da944da25c35267c33d8c4ead6756290cc96b930af73ae6fdc1df582efc2baae6feeab8fa73253958a60d3c266f606961f34569872accaf3387b70947871eb8830655e5f7d8b29f82741f7b68e5964c443485f95c2e96835881070d96e13ffd644ae9071a0c1594827e3bccb86e81cddc8ecc47722fd5948c2e888b68cf58f39a9e770c3f2fea5aad0835c569b1522713be1f9a965583ffb1a29fcd85b1f8788cc37b25d7959ed4bd6907cf59c0306b03365f8c56a84e60366624d2629f3f85b7032a3485885f3c61fb91a8646e07f178d1f62c4329e62d51941e1737b2152473f3d416b8dcbff7368041596b5109091bdd822535f90014dc04aa37ae"}}, &(0x7f0000001d80)) syz_ublk_setup_queues(r12, r10, &(0x7f0000000180)={0x0, 0x101, 0x800, 0x103, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x0, 0xb4, 0x0, r12}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5f18, 0x4, 0x1, 0x146, 0x0, r12}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90e, 0x0, 0x0, 0x300, 0x0, r12}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8dd0, 0x0, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, r13, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0x2, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x2, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000180)={0x1}, 0x4) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 31m47.049041105s ago: executing program 2 (id=404): socket$nl_generic(0x10, 0x3, 0x10) openat$nullb(0xffffffffffffff9c, &(0x7f0000002980), 0x4000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = add_key(0x0, &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) add_key(0x0, 0x0, &(0x7f0000000200)="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", 0x1da, r3) mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f0000000580)={0x600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0xffffffffffffffff}) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r5 = dup(r4) mmap(&(0x7f00005fe000/0x2000)=nil, 0x2000, 0x2, 0x28011, r5, 0x0) 31m45.37329015s ago: executing program 2 (id=405): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x44050) writev(0xffffffffffffffff, &(0x7f0000000580), 0x0) prctl$PR_SCHED_CORE(0x23, 0x0, 0x0, 0x0, &(0x7f0000000340)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r4, 0x29, 0x1e, 0x0, &(0x7f0000000540)) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) accept4(r5, 0x0, 0x0, 0x80000) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_MSCBIT(r6, 0x40045568, 0x0) 31m41.918403329s ago: executing program 2 (id=408): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) open(&(0x7f0000000140)='./file0\x00', 0x80, 0x28) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f0000000280)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x0) ioctl(0xffffffffffffffff, 0x40104d01, &(0x7f0000000a00)) linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0) socket$netlink(0x10, 0x3, 0x0) statx(r0, &(0x7f00000000c0)='./file1\x00', 0x1000, 0x40, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_set$uid(0x3, r4, 0x4007) 31m39.887624999s ago: executing program 2 (id=411): r0 = syz_open_dev$video(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x1, 0x2, 0x2}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x20100, 0x120) getsockopt$inet_mreqn(r1, 0x0, 0x23, 0x0, &(0x7f0000000640)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000a80)={0x0, 0xabba, 0x400, 0x1, 0x158}, &(0x7f0000000100)=0x0, &(0x7f00000006c0)=0x0, &(0x7f0000000580)=0x0) syz_ublk_add_dev(r6, r7, r8, r9, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x111, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@new_dev={0x1, 0x891, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x104}}}, &(0x7f0000000480)=0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_ublk_setup_queues(0xffffffffffffffff, r10, &(0x7f0000000700)={0x0, 0x5dda, 0x0, 0x1, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x2, 0x2100, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11be, 0x8000, 0xfffffffe, 0x25e}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x1000, 0x3, 0x1f0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x862c, 0x8200, 0x0, 0x250}}], 0x1, &(0x7f0000000340)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0x2, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x1, 0x1, 0x2}) 31m38.346346056s ago: executing program 2 (id=413): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008002}, 0x20000000) socket$phonet(0x23, 0x2, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioprio_get$pid(0x2, r2) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r5, 0x10e, 0xc, &(0x7f0000000200)=0x5, 0x4) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="180000003a0029020000000004dbdf250a"], 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 31m22.549205481s ago: executing program 33 (id=413): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008002}, 0x20000000) socket$phonet(0x23, 0x2, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioprio_get$pid(0x2, r2) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r5, 0x10e, 0xc, &(0x7f0000000200)=0x5, 0x4) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="180000003a0029020000000004dbdf250a"], 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 26m9.170733191s ago: executing program 5 (id=1414): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x80000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0x3) 26m8.692467307s ago: executing program 5 (id=1416): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000000)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x6, 0x92, &(0x7f0000000300)=""/146, 0x0, 0x8}, 0x94) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x12, r3, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000001c0)={0x80001009, 0x0, 0x0, 'queue1\x00', 0xfffffffc}) write$sndseq(r4, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) 26m7.97859534s ago: executing program 5 (id=1419): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r4, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) 26m7.744243564s ago: executing program 5 (id=1420): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$ttynull(0xffffffffffffff9c, 0x0, 0x200, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfc409000) ioprio_set$pid(0x2, r0, 0x6000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x4e, 0x1, 0x8, 0x200, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="2c0000003f00070100000000fddbdf25027c00001800378013000100"], 0x2c}, 0x1, 0x0, 0x0, 0xc880}, 0x0) 26m6.962923784s ago: executing program 5 (id=1422): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) pipe2(0x0, 0xdecb0e7b592b9954) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$can_j1939(0x1d, 0x2, 0x7) 26m5.632794668s ago: executing program 5 (id=1423): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_open_dev$tty20(0xc, 0x4, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffcffffff, 0x20031, 0xffffffffffffffff, 0xbe9f5000) 25m49.488991299s ago: executing program 34 (id=1423): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_open_dev$tty20(0xc, 0x4, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffcffffff, 0x20031, 0xffffffffffffffff, 0xbe9f5000) 20m9.546446996s ago: executing program 4 (id=2062): fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071123d000000000095000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x5) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100), 0x103000, 0x0) rt_sigpending(0x0, 0x0) bind$bt_hci(r1, &(0x7f0000000180)={0x1f, 0x3, 0x1}, 0x6) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x8800) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 20m0.754252222s ago: executing program 4 (id=2070): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f00000000c0)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7020000540000a1b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000c309000001000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0xd}, 0x94) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/dynamic_events\x00', 0x1, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x1000, &(0x7f0000000180)={0xa, 0x8, 0x100000}, 0x20) write(r3, &(0x7f0000000100)='e:my_read_msr1 msr/', 0x13) 20m0.113984182s ago: executing program 4 (id=2071): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f00000000c0)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7020000540000a1b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000c309000001000000bf91000000000000b7020000020000008500000085000000b700000000000000"], &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0xd}, 0x94) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/dynamic_events\x00', 0x1, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x1000, &(0x7f0000000180)={0xa, 0x8, 0x100000}, 0x20) write(r3, &(0x7f0000000100)='e:my_read_msr1 msr/', 0x13) 19m59.613069611s ago: executing program 4 (id=2072): socket$packet(0x11, 0x2, 0x300) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) bind$bt_rfcomm(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfd}, 0xa) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x4, 0x3) connect$bt_rfcomm(r1, &(0x7f0000000180)={0x1f, @any, 0xff}, 0xa) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000002780), 0xaa500, 0x0) ioctl$SNDCTL_SYNTH_MEMAVL(r3, 0xc004510e, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./debug\x00', 0x1ff) r4 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) r5 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r5, &(0x7f0000001840)={&(0x7f0000000380)={0xa, 0x4e24, 0x7, @empty, 0x3}, 0x1c, 0x0, 0x0, &(0x7f0000000500)=[@dstopts_2292={{0x18, 0x29, 0x4, {0x32}}}, @dstopts_2292={{0x18, 0x29, 0x4, {0x32}}}], 0x30}, 0x4040040) ioctl$VIDIOC_G_TUNER(r4, 0xc054561d, &(0x7f00000003c0)={0x2001, "16809f2e04865e4f0eb0f0a01415a98efac4e085ab9eeec24bf1362d808125d2", 0x2, 0x20, 0x1, 0xc6, 0x10, 0x0, 0x7fff, 0x5}) mount(0x0, &(0x7f00000000c0)='./debug\x00', 0x0, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./debug/kvm/mmu_shadow_zapped\x00', 0x0, 0x0) read(r6, 0x0, 0x0) connect$bt_rfcomm(r0, &(0x7f0000000080)={0x1f, @none, 0x4}, 0xa) 19m59.221657522s ago: executing program 4 (id=2073): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 00040'], 0x2a, 0x0) r4 = add_key(&(0x7f0000000140)='encrypted\x00', 0x0, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) keyctl$read(0xb, r4, &(0x7f0000000240)=""/112, 0xd9) 19m57.937453299s ago: executing program 4 (id=2075): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x7}, 0x50) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000440)='retrans\x00', &(0x7f0000000340)='1\x00', 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000002d40)={0x0, 0x0, 0x0}, 0x24004000) unshare(0x40200) semget(0x2, 0x1, 0x39c) unshare(0x40400) syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) 19m41.788817299s ago: executing program 35 (id=2075): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x7}, 0x50) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000440)='retrans\x00', &(0x7f0000000340)='1\x00', 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000002d40)={0x0, 0x0, 0x0}, 0x24004000) unshare(0x40200) semget(0x2, 0x1, 0x39c) unshare(0x40400) syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) 18m28.466007523s ago: executing program 6 (id=2183): socket(0x18, 0x3, 0x0) epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x44080) socket$igmp(0x2, 0x3, 0x2) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f00000004c0), 0x1000, r0}, 0x38) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0xb04, 0x0, 0x2, 0x158}, &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000140)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, 0x0, &(0x7f0000000180)={0x0, 0xae0c, 0x800, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2100, 0x10000004, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1000, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100014800c00068008"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 18m22.803934021s ago: executing program 6 (id=2192): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 00040'], 0x2a, 0x0) r0 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$read(0xb, r0, 0x0, 0x0) 18m22.114360963s ago: executing program 6 (id=2193): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./dev/sda\x00', 0x84042, 0xc2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) write$P9_RUNLINKAT(r2, 0x0, 0x0) 18m20.078687883s ago: executing program 6 (id=2196): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000003540)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x94) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x41) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$key(0xf, 0x3, 0x2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) r3 = io_uring_setup(0x1551, &(0x7f0000000240)={0x0, 0x651f, 0x2, 0x1, 0x19e}) mmap$IORING_OFF_CQ_RING(0x0, 0x1000, 0x1000000, 0x4052, r3, 0xffffffff80000000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xb, 0x0, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00Q', 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 18m14.204571462s ago: executing program 6 (id=2207): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000003540)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x94) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x41) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$key(0xf, 0x3, 0x2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x4f}]}, &(0x7f0000000080)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r5 = io_uring_setup(0x1551, &(0x7f0000000240)={0x0, 0x651f, 0x2, 0x1, 0x19e}) mmap$IORING_OFF_CQ_RING(0x0, 0x1000, 0x1000000, 0x4052, r5, 0xffffffff80000000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xb, 0x0, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00Q', 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/irq/12/smp_affinity\x00', 0x1, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002180)=ANY=[@ANYBLOB="b8000000290001000000000000080000ac1414bb000000000000000000000000fc0000000000000000000000000000000000000010000000020020000000"], 0xb8}, 0x1, 0x0, 0x0, 0x2404c831}, 0x0) write$cgroup_netprio_ifpriomap(r6, &(0x7f0000000280)=ANY=[@ANYBLOB='wl'], 0x8) io_uring_enter(r6, 0x220c, 0x2755, 0x2, &(0x7f0000000000)={[0x83]}, 0x8) 18m12.453959369s ago: executing program 6 (id=2211): r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa08, &(0x7f0000000240)={{&(0x7f0000c00000/0x400000)=nil, 0x400000}}) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, 0x0) ioctl$VIDIOC_QBUF(r1, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "8000"}, 0x0, 0x2, {}, 0x20800}) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, 0x0, 0x0, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000080)={0x30000016}) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000a40), 0x401, 0x0) write$UHID_INPUT(r5, &(0x7f0000000e40)={0x8, {"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", 0x1000}}, 0x1006) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r7], 0x60}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r5, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, r3, {0x1}}, '\x00'}) connect$unix(r8, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r5, 0xc018937c, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2, {0x3}}, './file0\x00'}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000000)={0xa0000001}) epoll_pwait(r4, &(0x7f0000000040)=[{}], 0x1, 0xff, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000880), r0) close_range(r0, 0xffffffffffffffff, 0x0) 17m57.312498264s ago: executing program 36 (id=2211): r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa08, &(0x7f0000000240)={{&(0x7f0000c00000/0x400000)=nil, 0x400000}}) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, 0x0) ioctl$VIDIOC_QBUF(r1, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "8000"}, 0x0, 0x2, {}, 0x20800}) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, 0x0, 0x0, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000080)={0x30000016}) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000a40), 0x401, 0x0) write$UHID_INPUT(r5, &(0x7f0000000e40)={0x8, {"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", 0x1000}}, 0x1006) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r7], 0x60}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r5, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, r3, {0x1}}, '\x00'}) connect$unix(r8, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r5, 0xc018937c, &(0x7f0000000140)={{0x1, 0x1, 0x18, r2, {0x3}}, './file0\x00'}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000000)={0xa0000001}) epoll_pwait(r4, &(0x7f0000000040)=[{}], 0x1, 0xff, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000880), r0) close_range(r0, 0xffffffffffffffff, 0x0) 17m49.870691979s ago: executing program 1 (id=2239): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x7, 0x3000003, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$llc(0x1a, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r2 = socket$inet(0x2, 0x3, 0x4) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002f80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x18}}], 0x1, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000400)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) sendmmsg$inet(r2, &(0x7f0000000f40), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 17m49.454629574s ago: executing program 1 (id=2240): openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001400)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x50) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000180)={0x50, 0x0, 0x0, {0x7, 0x26, 0x5, 0xffffffffc4e10885, 0x0, 0xfffc, 0x6, 0x5d2186cc, 0x0, 0x0, 0x1, 0x10001}}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x3e}, 0x1c) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xc4, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x25}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x0) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) io_setup(0x5a6, &(0x7f0000000040)=0x0) r6 = eventfd(0x3) io_cancel(r5, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x8, 0x7fff, r2, &(0x7f0000000600)="189c176059d49c009a3f4450954cb7dc93e18b4d0e062e40f2ec1bb808d11560452e66483b9edb3d974ec1d11fcf8e959482e5056326bd7077759fbdf0d097057a877f1958d71337", 0x48, 0x2, 0x0, 0x3, r6}, &(0x7f0000000700)) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newsa={0x158, 0x10, 0x5, 0x1, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80, 0x0, 0x0, 0x80}, {@in6=@loopback, 0x1234, 0x33}, @in6=@loopback, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x80}, [@algo_auth={0x48, 0x1, {{'hmac(sha1)\x00'}}}, @replay_esn_val={0x20, 0x17, {0x1, 0x0, 0x0, 0x0, 0x0, 0x20, [0x0]}}]}, 0x158}}, 0x0) sendmsg$nl_xfrm(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@newpolicy={0xfc, 0x13, 0x5, 0x1, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x1234, 0x33}, 0xa, @in6=@loopback}]}]}, 0xfc}}, 0x0) 17m48.132266304s ago: executing program 1 (id=2242): openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001400)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x50) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000180)={0x50, 0x0, 0x0, {0x7, 0x26, 0x5, 0xffffffffc4e10885, 0x0, 0xfffc, 0x6, 0x5d2186cc, 0x0, 0x0, 0x1, 0x10001}}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x3e}, 0x1c) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xc4, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x25}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x0) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) io_setup(0x5a6, &(0x7f0000000040)=0x0) r6 = eventfd(0x3) io_cancel(r5, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x8, 0x7fff, r2, &(0x7f0000000600)="189c176059d49c009a3f4450954cb7dc93e18b4d0e062e40f2ec1bb808d11560452e66483b9edb3d974ec1d11fcf8e959482e5056326bd7077759fbdf0d097057a877f1958d71337", 0x48, 0x2, 0x0, 0x3, r6}, &(0x7f0000000700)) 17m45.264279264s ago: executing program 1 (id=2244): sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}, 0x80) openat$smackfs_cipso(0xffffffffffffff9c, &(0x7f00000030c0)='/sys/fs/smackfs/cipso\x00', 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c86, 0x20, 0x3, 0x2ad}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xae8, 0x4000, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 17m39.635353043s ago: executing program 1 (id=2250): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs$userns(0x0, &(0x7f0000000240)) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, 0x0, 0x0) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[], 0x38}}], 0x1, 0xc050) connect$inet(r4, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r4, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) 17m37.941793408s ago: executing program 1 (id=2252): openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001400)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x50) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000180)={0x50, 0x0, 0x0, {0x7, 0x26, 0x5, 0xffffffffc4e10885, 0x0, 0xfffc, 0x6, 0x5d2186cc, 0x0, 0x0, 0x1, 0x10001}}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x3e}, 0x1c) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xc4, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x25}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x0) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) io_setup(0x5a6, &(0x7f0000000040)=0x0) r6 = eventfd(0x3) io_cancel(r5, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x8, 0x7fff, r2, &(0x7f0000000600)="189c176059d49c009a3f4450954cb7dc93e18b4d0e062e40f2ec1bb808d11560452e66483b9edb3d974ec1d11fcf8e959482e5056326bd7077759fbdf0d097057a877f1958d71337", 0x48, 0x2, 0x0, 0x3, r6}, &(0x7f0000000700)) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newsa={0x158, 0x10, 0x5, 0x1, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80, 0x0, 0x0, 0x80}, {@in6=@loopback, 0x1234, 0x33}, @in6=@loopback, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x80}, [@algo_auth={0x48, 0x1, {{'hmac(sha1)\x00'}}}, @replay_esn_val={0x20, 0x17, {0x1, 0x0, 0x0, 0x0, 0x0, 0x20, [0x0]}}]}, 0x158}}, 0x0) sendmmsg$inet6(r3, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000680)='A', 0x1}], 0x1}}], 0x1, 0x4000801) 17m22.683023887s ago: executing program 37 (id=2252): openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001400)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x50) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000180)={0x50, 0x0, 0x0, {0x7, 0x26, 0x5, 0xffffffffc4e10885, 0x0, 0xfffc, 0x6, 0x5d2186cc, 0x0, 0x0, 0x1, 0x10001}}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x3e}, 0x1c) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xc4, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x25}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x0) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) io_setup(0x5a6, &(0x7f0000000040)=0x0) r6 = eventfd(0x3) io_cancel(r5, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x8, 0x7fff, r2, &(0x7f0000000600)="189c176059d49c009a3f4450954cb7dc93e18b4d0e062e40f2ec1bb808d11560452e66483b9edb3d974ec1d11fcf8e959482e5056326bd7077759fbdf0d097057a877f1958d71337", 0x48, 0x2, 0x0, 0x3, r6}, &(0x7f0000000700)) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newsa={0x158, 0x10, 0x5, 0x1, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80, 0x0, 0x0, 0x80}, {@in6=@loopback, 0x1234, 0x33}, @in6=@loopback, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x80}, [@algo_auth={0x48, 0x1, {{'hmac(sha1)\x00'}}}, @replay_esn_val={0x20, 0x17, {0x1, 0x0, 0x0, 0x0, 0x0, 0x20, [0x0]}}]}, 0x158}}, 0x0) sendmmsg$inet6(r3, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000680)='A', 0x1}], 0x1}}], 0x1, 0x4000801) 9m49.604644211s ago: executing program 3 (id=2625): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="280100000000000001000000"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}, 0x80) openat$smackfs_cipso(0xffffffffffffff9c, &(0x7f00000030c0)='/sys/fs/smackfs/cipso\x00', 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c86, 0x20, 0x3, 0x2ad}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xae8, 0x4000, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 9m48.85694273s ago: executing program 3 (id=2626): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2136dbec, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0xffffffffffffffff, 0x0, 0x1, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000040)) r1 = socket(0x3, 0x3, 0xff) setsockopt$inet_int(r1, 0x0, 0x3, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x8010, 0xffffffffffffffff, 0x1000) rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000b00)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x01\x83y\xf3\xb2\xe6b$\a\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\b\x00\x00\x00LR\xa1\x00\x00\x17\x1f$^\xe1\x00\x04\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\xce\xd5O\xcc\b\x9e\x19\x19#\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$h\x0ew\x00&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x01\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xff\x06\xe7j\x9fTJ;T\xf3\xfa\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x00\x00\x00\x00\x00\x00\x00\x0f\x81\xf3\x05\xa3{\x96\xf9\xba\x9em\xe9\"\x03\x933P\xbb\xd6\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10\x00\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x131\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00\x00\x00\x8fw\xa9A\xf7m\xeec\xb6\\\xa4T\xeej\xe2\xba\xb2V\xacc\xc6|\xae]\xdb\x10\xb3\x80z\xd5\n\xa3u\xfb\b\x03\xe5\xca;\xe5uH<\x9a\x12\x84(\x9f\xd2\xe1k\x955;J\xa4\x81Lm\x90\x1a\xfdI}\xb0\xa1\xfa9\x17\xd1\xa2\xc7\xca\x98\xaeS\x92Ew`\xd2\x02\xda\xc9\xd4\xea\x02\x1d\xd3\xd5\x81\xdb\xd9~\xd6-:\xee\xe8\t\xf7\xe6\xf1\x88\x86\xb0\x04\x9ep\xb1\x93\x16\xf9\xdb\x15\x8a\xa3h<\xaf\xa0\xb5\xb0\x05ir\xff\xff\xff\xff\x00\x00\x00\x00\x83\x91\xad\x11\xf4\xbcz\x9b\x8bp]o\au\x175I\x1d\xe2\x97\xb6\x06\xdc\x14\x9b>\xd7F\xdb?\xc7%0n/\xf5S\xb5\xe8\xa5\xd1\xddN\xf9ir\xd1r\xf4L\t3\xadDz\\\xf4`\x13\xf7)\x91w\a\xcc+E\xdd\xe9\xdbb\x9c\xff\x98\x03\xb7\x0e=\xba\xa3um\xde\xff$|\xb7\x86j+\x00\x00\x00\x00\x00\x00\x00Z\xef\xd6\xf4Zs\xfc\ro\x03\xabB\x18\xdc\a\xe3\r\x00\x00\x00\x00\x00\x00', 0x6) fallocate(r2, 0x0, 0x0, 0x400001) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r3, &(0x7f0000000000)='3', 0x4e) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r4, 0xffffa000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000240)=0x2) 9m46.876039556s ago: executing program 3 (id=2630): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2136dbec, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0xffffffffffffffff, 0x0, 0x1, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000040)) r1 = socket(0x3, 0x3, 0xff) setsockopt$inet_int(r1, 0x0, 0x3, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x8010, 0xffffffffffffffff, 0x1000) rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000b00)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x01\x83y\xf3\xb2\xe6b$\a\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\b\x00\x00\x00LR\xa1\x00\x00\x17\x1f$^\xe1\x00\x04\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\xce\xd5O\xcc\b\x9e\x19\x19#\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$h\x0ew\x00&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x01\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xff\x06\xe7j\x9fTJ;T\xf3\xfa\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x00\x00\x00\x00\x00\x00\x00\x0f\x81\xf3\x05\xa3{\x96\xf9\xba\x9em\xe9\"\x03\x933P\xbb\xd6\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10\x00\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x131\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00\x00\x00\x8fw\xa9A\xf7m\xeec\xb6\\\xa4T\xeej\xe2\xba\xb2V\xacc\xc6|\xae]\xdb\x10\xb3\x80z\xd5\n\xa3u\xfb\b\x03\xe5\xca;\xe5uH<\x9a\x12\x84(\x9f\xd2\xe1k\x955;J\xa4\x81Lm\x90\x1a\xfdI}\xb0\xa1\xfa9\x17\xd1\xa2\xc7\xca\x98\xaeS\x92Ew`\xd2\x02\xda\xc9\xd4\xea\x02\x1d\xd3\xd5\x81\xdb\xd9~\xd6-:\xee\xe8\t\xf7\xe6\xf1\x88\x86\xb0\x04\x9ep\xb1\x93\x16\xf9\xdb\x15\x8a\xa3h<\xaf\xa0\xb5\xb0\x05ir\xff\xff\xff\xff\x00\x00\x00\x00\x83\x91\xad\x11\xf4\xbcz\x9b\x8bp]o\au\x175I\x1d\xe2\x97\xb6\x06\xdc\x14\x9b>\xd7F\xdb?\xc7%0n/\xf5S\xb5\xe8\xa5\xd1\xddN\xf9ir\xd1r\xf4L\t3\xadDz\\\xf4`\x13\xf7)\x91w\a\xcc+E\xdd\xe9\xdbb\x9c\xff\x98\x03\xb7\x0e=\xba\xa3um\xde\xff$|\xb7\x86j+\x00\x00\x00\x00\x00\x00\x00Z\xef\xd6\xf4Zs\xfc\ro\x03\xabB\x18\xdc\a\xe3\r\x00\x00\x00\x00\x00\x00', 0x6) fallocate(r2, 0x0, 0x0, 0x400001) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r3, &(0x7f0000000000)='3', 0x4e) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r4, 0xffffa000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000240)=0x2) 9m44.230065166s ago: executing program 3 (id=2632): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='fd/4\x00') inotify_add_watch(r1, 0x0, 0x80000802) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0xf, 0x6, 0x0, 0x6, 0x6, 0x6, 0x2002, 0x3}, 0x0) userfaultfd(0x1) close(0x3) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x14}}, 0x4004804) r4 = syz_open_dev$ttys(0xc, 0x2, 0x0) r5 = dup2(r4, r4) write$P9_RREADLINK(r5, 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @remote}, 0xc) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x4000050) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="10aed501d8180bc96fb05b0d729821e8011e224982d6a32a49233ff4", @ANYRESOCT, @ANYBLOB="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", @ANYRES64, @ANYRES32=0x0], 0x50) openat$userio(0xffffffffffffff9c, &(0x7f0000000140), 0x22242, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000003c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4c080}, 0x24004040) sendmsg$NL80211_CMD_SET_CQM(r6, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000880)=ANY=[@ANYBLOB="90000000", @ANYRES16, @ANYBLOB="3072a67a023315de450599d8654f486f343cfdeba599fdd315eb75611a909ccfaa9e3422a90c03", @ANYRES32=0x0, @ANYRES8=r4], 0x90}, 0x1, 0x0, 0x0, 0x400c840}, 0x20004010) 9m41.846195444s ago: executing program 3 (id=2635): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2136dbec, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0xffffffffffffffff, 0x0, 0x1, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000040)) r1 = socket(0x3, 0x3, 0xff) setsockopt$inet_int(r1, 0x0, 0x3, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x8010, 0xffffffffffffffff, 0x1000) rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000b00)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x01\x83y\xf3\xb2\xe6b$\a\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\b\x00\x00\x00LR\xa1\x00\x00\x17\x1f$^\xe1\x00\x04\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\xce\xd5O\xcc\b\x9e\x19\x19#\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$h\x0ew\x00&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x01\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xff\x06\xe7j\x9fTJ;T\xf3\xfa\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x00\x00\x00\x00\x00\x00\x00\x0f\x81\xf3\x05\xa3{\x96\xf9\xba\x9em\xe9\"\x03\x933P\xbb\xd6\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10\x00\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x131\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00\x00\x00\x8fw\xa9A\xf7m\xeec\xb6\\\xa4T\xeej\xe2\xba\xb2V\xacc\xc6|\xae]\xdb\x10\xb3\x80z\xd5\n\xa3u\xfb\b\x03\xe5\xca;\xe5uH<\x9a\x12\x84(\x9f\xd2\xe1k\x955;J\xa4\x81Lm\x90\x1a\xfdI}\xb0\xa1\xfa9\x17\xd1\xa2\xc7\xca\x98\xaeS\x92Ew`\xd2\x02\xda\xc9\xd4\xea\x02\x1d\xd3\xd5\x81\xdb\xd9~\xd6-:\xee\xe8\t\xf7\xe6\xf1\x88\x86\xb0\x04\x9ep\xb1\x93\x16\xf9\xdb\x15\x8a\xa3h<\xaf\xa0\xb5\xb0\x05ir\xff\xff\xff\xff\x00\x00\x00\x00\x83\x91\xad\x11\xf4\xbcz\x9b\x8bp]o\au\x175I\x1d\xe2\x97\xb6\x06\xdc\x14\x9b>\xd7F\xdb?\xc7%0n/\xf5S\xb5\xe8\xa5\xd1\xddN\xf9ir\xd1r\xf4L\t3\xadDz\\\xf4`\x13\xf7)\x91w\a\xcc+E\xdd\xe9\xdbb\x9c\xff\x98\x03\xb7\x0e=\xba\xa3um\xde\xff$|\xb7\x86j+\x00\x00\x00\x00\x00\x00\x00Z\xef\xd6\xf4Zs\xfc\ro\x03\xabB\x18\xdc\a\xe3\r\x00\x00\x00\x00\x00\x00', 0x6) fallocate(r2, 0x0, 0x0, 0x400001) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r3, &(0x7f0000000000)='3', 0x4e) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r4, 0xffffa000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000240)=0x2) 9m36.994495316s ago: executing program 3 (id=2639): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) r0 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x1, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r4 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000140)='vers\x00', &(0x7f0000000180)='3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f00000001c0)='source\x00', &(0x7f0000000200)='127.0.0.1:/export\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000240)='addr\x00', &(0x7f0000000280)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, 0x0, 0x240008c4) socket$igmp6(0xa, 0x3, 0x2) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, 0x0) 9m3.270578646s ago: executing program 7 (id=2687): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_usb_connect(0x2, 0x4e, &(0x7f0000000500)=ANY=[@ANYBLOB="12010002ff000040cd06310100010102030109023c00010100a0320904000006ff00000007050102400000070502024000000705040240000007050602400000070581034000010705880240"], 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f00000007c0)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) recvmsg$unix(0xffffffffffffffff, 0x0, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setns(0xc9, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000010c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, 0x0, 0x0) r5 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) r6 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f0000000500)='asymmetric\x00', &(0x7f0000000380)) keyctl$KEYCTL_MOVE(0x1e, r5, 0xffffffffffffffff, r6, 0x0) 8m59.738096027s ago: executing program 7 (id=2693): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) unshare(0x22020600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x3, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f00000270c0)=""/102400, 0x19000) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x410000002) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) socket$nl_route(0x10, 0x3, 0x0) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) r5 = socket$can_j1939(0x1d, 0x2, 0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000400)=ANY=[], 0x0}, 0x94) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = socket$inet6(0xa, 0x3, 0x40) bind(r6, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) bind$can_j1939(r5, 0x0, 0x0) 8m56.337986996s ago: executing program 7 (id=2698): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) unshare(0x22020600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x3, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x410000002) ptrace(0x10, 0x0) socket$nl_route(0x10, 0x3, 0x0) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000400)=ANY=[], 0x0}, 0x94) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r3 = socket$inet6(0xa, 0x3, 0x40) bind(r3, &(0x7f0000000000)=@hci={0xa, 0x0, 0x2}, 0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) 8m56.091301176s ago: executing program 7 (id=2699): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2136dbec, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0xffffffffffffffff, 0x0, 0x1, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000040)) r1 = socket(0x3, 0x3, 0xff) setsockopt$inet_int(r1, 0x0, 0x3, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x8010, 0xffffffffffffffff, 0x1000) rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000b00)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x01\x83y\xf3\xb2\xe6b$\a\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\b\x00\x00\x00LR\xa1\x00\x00\x17\x1f$^\xe1\x00\x04\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\xce\xd5O\xcc\b\x9e\x19\x19#\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$h\x0ew\x00&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x01\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xff\x06\xe7j\x9fTJ;T\xf3\xfa\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x00\x00\x00\x00\x00\x00\x00\x0f\x81\xf3\x05\xa3{\x96\xf9\xba\x9em\xe9\"\x03\x933P\xbb\xd6\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10\x00\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x131\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00\x00\x00\x8fw\xa9A\xf7m\xeec\xb6\\\xa4T\xeej\xe2\xba\xb2V\xacc\xc6|\xae]\xdb\x10\xb3\x80z\xd5\n\xa3u\xfb\b\x03\xe5\xca;\xe5uH<\x9a\x12\x84(\x9f\xd2\xe1k\x955;J\xa4\x81Lm\x90\x1a\xfdI}\xb0\xa1\xfa9\x17\xd1\xa2\xc7\xca\x98\xaeS\x92Ew`\xd2\x02\xda\xc9\xd4\xea\x02\x1d\xd3\xd5\x81\xdb\xd9~\xd6-:\xee\xe8\t\xf7\xe6\xf1\x88\x86\xb0\x04\x9ep\xb1\x93\x16\xf9\xdb\x15\x8a\xa3h<\xaf\xa0\xb5\xb0\x05ir\xff\xff\xff\xff\x00\x00\x00\x00\x83\x91\xad\x11\xf4\xbcz\x9b\x8bp]o\au\x175I\x1d\xe2\x97\xb6\x06\xdc\x14\x9b>\xd7F\xdb?\xc7%0n/\xf5S\xb5\xe8\xa5\xd1\xddN\xf9ir\xd1r\xf4L\t3\xadDz\\\xf4`\x13\xf7)\x91w\a\xcc+E\xdd\xe9\xdbb\x9c\xff\x98\x03\xb7\x0e=\xba\xa3um\xde\xff$|\xb7\x86j+\x00\x00\x00\x00\x00\x00\x00Z\xef\xd6\xf4Zs\xfc\ro\x03\xabB\x18\xdc\a\xe3\r\x00\x00\x00\x00\x00\x00', 0x6) fallocate(r2, 0x0, 0x0, 0x400001) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r3, &(0x7f0000000000)='3', 0x4e) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffa000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) 8m55.524956151s ago: executing program 7 (id=2701): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2136dbec, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0xffffffffffffffff, 0x0, 0x1, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000040)) r1 = socket(0x3, 0x3, 0xff) setsockopt$inet_int(r1, 0x0, 0x3, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x8010, 0xffffffffffffffff, 0x1000) rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000b00)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x01\x83y\xf3\xb2\xe6b$\a\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\b\x00\x00\x00LR\xa1\x00\x00\x17\x1f$^\xe1\x00\x04\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\xce\xd5O\xcc\b\x9e\x19\x19#\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$h\x0ew\x00&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x01\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xff\x06\xe7j\x9fTJ;T\xf3\xfa\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x00\x00\x00\x00\x00\x00\x00\x0f\x81\xf3\x05\xa3{\x96\xf9\xba\x9em\xe9\"\x03\x933P\xbb\xd6\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10\x00\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x131\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00\x00\x00\x8fw\xa9A\xf7m\xeec\xb6\\\xa4T\xeej\xe2\xba\xb2V\xacc\xc6|\xae]\xdb\x10\xb3\x80z\xd5\n\xa3u\xfb\b\x03\xe5\xca;\xe5uH<\x9a\x12\x84(\x9f\xd2\xe1k\x955;J\xa4\x81Lm\x90\x1a\xfdI}\xb0\xa1\xfa9\x17\xd1\xa2\xc7\xca\x98\xaeS\x92Ew`\xd2\x02\xda\xc9\xd4\xea\x02\x1d\xd3\xd5\x81\xdb\xd9~\xd6-:\xee\xe8\t\xf7\xe6\xf1\x88\x86\xb0\x04\x9ep\xb1\x93\x16\xf9\xdb\x15\x8a\xa3h<\xaf\xa0\xb5\xb0\x05ir\xff\xff\xff\xff\x00\x00\x00\x00\x83\x91\xad\x11\xf4\xbcz\x9b\x8bp]o\au\x175I\x1d\xe2\x97\xb6\x06\xdc\x14\x9b>\xd7F\xdb?\xc7%0n/\xf5S\xb5\xe8\xa5\xd1\xddN\xf9ir\xd1r\xf4L\t3\xadDz\\\xf4`\x13\xf7)\x91w\a\xcc+E\xdd\xe9\xdbb\x9c\xff\x98\x03\xb7\x0e=\xba\xa3um\xde\xff$|\xb7\x86j+\x00\x00\x00\x00\x00\x00\x00Z\xef\xd6\xf4Zs\xfc\ro\x03\xabB\x18\xdc\a\xe3\r\x00\x00\x00\x00\x00\x00', 0x6) fallocate(r2, 0x0, 0x0, 0x400001) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r3, &(0x7f0000000000)='3', 0x4e) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffa000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) 8m49.811512037s ago: executing program 7 (id=2705): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newlink={0x5c, 0x10, 0x401, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x34091, 0x22000}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x30, 0x2, 0x0, 0x1, [@IFLA_HSR_SUPERVISION_ADDR={0xa, 0x4, @multicast}, @IFLA_HSR_PROTOCOL={0x5}, @IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_SLAVE1={0x8}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24048c00}, 0x10) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042406"], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f010400000008000000"], 0x0) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) writev(0xffffffffffffffff, 0x0, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x1000000, 0x5d032, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80801) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, 0x0) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f00000001c0)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'lblcr\x00', 0x1, 0x80005, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e22, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@remote, 0x4e20, 0x2, 0xcd}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) r4 = socket(0x2, 0x80805, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x0, 0x3, 'lblcr\x00', 0x1, 0x80005, 0x41}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @multicast2, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x2, 0xcd, 0x8400}}, 0x44) r6 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r6, &(0x7f0000000000)={0x18, 0x0, {0x100, @empty, 'lo\x00'}}, 0x1e) connect$pppoe(r6, &(0x7f0000000240)={0x18, 0x0, {0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 'veth0_macvtap\x00'}}, 0x1e) 8m14.942099759s ago: executing program 0 (id=2736): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2136dbec, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0xffffffffffffffff, 0x0, 0x1, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000040)) r1 = socket(0x3, 0x3, 0xff) setsockopt$inet_int(r1, 0x0, 0x3, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x8010, 0xffffffffffffffff, 0x1000) rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) memfd_create(&(0x7f0000000b00)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x01\x83y\xf3\xb2\xe6b$\a\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\b\x00\x00\x00LR\xa1\x00\x00\x17\x1f$^\xe1\x00\x04\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\xce\xd5O\xcc\b\x9e\x19\x19#\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$h\x0ew\x00&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x01\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xff\x06\xe7j\x9fTJ;T\xf3\xfa\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x00\x00\x00\x00\x00\x00\x00\x0f\x81\xf3\x05\xa3{\x96\xf9\xba\x9em\xe9\"\x03\x933P\xbb\xd6\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10\x00\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x131\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00\x00\x00\x8fw\xa9A\xf7m\xeec\xb6\\\xa4T\xeej\xe2\xba\xb2V\xacc\xc6|\xae]\xdb\x10\xb3\x80z\xd5\n\xa3u\xfb\b\x03\xe5\xca;\xe5uH<\x9a\x12\x84(\x9f\xd2\xe1k\x955;J\xa4\x81Lm\x90\x1a\xfdI}\xb0\xa1\xfa9\x17\xd1\xa2\xc7\xca\x98\xaeS\x92Ew`\xd2\x02\xda\xc9\xd4\xea\x02\x1d\xd3\xd5\x81\xdb\xd9~\xd6-:\xee\xe8\t\xf7\xe6\xf1\x88\x86\xb0\x04\x9ep\xb1\x93\x16\xf9\xdb\x15\x8a\xa3h<\xaf\xa0\xb5\xb0\x05ir\xff\xff\xff\xff\x00\x00\x00\x00\x83\x91\xad\x11\xf4\xbcz\x9b\x8bp]o\au\x175I\x1d\xe2\x97\xb6\x06\xdc\x14\x9b>\xd7F\xdb?\xc7%0n/\xf5S\xb5\xe8\xa5\xd1\xddN\xf9ir\xd1r\xf4L\t3\xadDz\\\xf4`\x13\xf7)\x91w\a\xcc+E\xdd\xe9\xdbb\x9c\xff\x98\x03\xb7\x0e=\xba\xa3um\xde\xff$|\xb7\x86j+\x00\x00\x00\x00\x00\x00\x00Z\xef\xd6\xf4Zs\xfc\ro\x03\xabB\x18\xdc\a\xe3\r\x00\x00\x00\x00\x00\x00', 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000000000)='3', 0x4e) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) 8m14.326906998s ago: executing program 0 (id=2738): openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001400)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x50) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000180)={0x50, 0x0, 0x0, {0x7, 0x26, 0x5, 0xffffffffc4e10885, 0x0, 0xfffc, 0x6, 0x5d2186cc, 0x0, 0x0, 0x1, 0x10001}}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xc4, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x25}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x0) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) io_setup(0x5a6, &(0x7f0000000040)=0x0) r6 = eventfd(0x3) io_cancel(r5, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x8, 0x7fff, r2, &(0x7f0000000600)="189c176059d49c009a3f4450954cb7dc93e18b4d0e062e40f2ec1bb808d11560452e66483b9edb3d974ec1d11fcf8e959482e5056326bd7077759fbdf0d097057a877f1958d71337", 0x48, 0x2, 0x0, 0x3, r6}, &(0x7f0000000700)) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newsa={0x158, 0x10, 0x5, 0x1, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80, 0x0, 0x0, 0x80}, {@in6=@loopback, 0x1234, 0x33}, @in6=@loopback, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x80}, [@algo_auth={0x48, 0x1, {{'hmac(sha1)\x00'}}}, @replay_esn_val={0x20, 0x17, {0x1, 0x0, 0x0, 0x0, 0x0, 0x20, [0x0]}}]}, 0x158}}, 0x0) sendmsg$nl_xfrm(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@newpolicy={0xfc, 0x13, 0x5, 0x1, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x1234, 0x33}, 0xa, @in6=@loopback}]}]}, 0xfc}}, 0x0) sendmmsg$inet6(r3, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000680)='A', 0x1}], 0x1}}], 0x1, 0x4000801) 8m9.794147385s ago: executing program 0 (id=2740): syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x6}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x380000, @empty}, 0x1c) ptrace$ARCH_GET_CPUID(0x1e, r0, 0x0, 0x1011) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000000200)=ANY=[@ANYBLOB="60000000020605000000000000000000000000000900020073797a31000000000500040000000000140007800500150040f17c070800124000000000050005000200000005"], 0x60}}, 0x20004890) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_procfs(r0, &(0x7f00000001c0)='net/ip_vs_stats\x00') r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r5}, &(0x7f00000007c0), &(0x7f0000000640)=r4}, 0x20) r6 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) unlinkat(0xffffffffffffffff, &(0x7f0000000f80)='./file0\x00', 0x0) sendmmsg$inet6(r6, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171, 0x0, 0x0, 0xf5ffffff}}], 0x400000000000172, 0x0) 8m4.594105368s ago: executing program 0 (id=2743): openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001400)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x50) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000180)={0x50, 0x0, 0x0, {0x7, 0x26, 0x5, 0xffffffffc4e10885, 0x0, 0xfffc, 0x6, 0x5d2186cc, 0x0, 0x0, 0x1, 0x10001}}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x3e}, 0x1c) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xc4, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x25}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x0) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) io_setup(0x5a6, &(0x7f0000000040)=0x0) r6 = eventfd(0x3) io_cancel(r5, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x8, 0x7fff, r2, &(0x7f0000000600)="189c176059d49c009a3f4450954cb7dc93e18b4d0e062e40f2ec1bb808d11560452e66483b9edb3d974ec1d11fcf8e959482e5056326bd7077759fbdf0d097057a877f1958d71337", 0x48, 0x2, 0x0, 0x3, r6}, &(0x7f0000000700)) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newsa={0x158, 0x10, 0x5, 0x1, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80, 0x0, 0x0, 0x80}, {@in6=@loopback, 0x1234, 0x33}, @in6=@loopback, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x80}, [@algo_auth={0x48, 0x1, {{'hmac(sha1)\x00'}}}, @replay_esn_val={0x20, 0x17, {0x1, 0x0, 0x0, 0x0, 0x0, 0x20, [0x0]}}]}, 0x158}}, 0x0) sendmsg$nl_xfrm(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@newpolicy={0xfc, 0x13, 0x5, 0x1, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x1234, 0x33}, 0xa, @in6=@loopback}]}]}, 0xfc}}, 0x0) sendmmsg$inet6(r3, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000680)='A', 0x1}], 0x1}}], 0x1, 0x4000801) 8m2.768233238s ago: executing program 0 (id=2746): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2136dbec, 0x800001000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0xffffffffffffffff, 0x0, 0x1, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000040)) r1 = socket(0x3, 0x3, 0xff) setsockopt$inet_int(r1, 0x0, 0x3, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x8010, 0xffffffffffffffff, 0x1000) rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x400001) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000000000)='3', 0x4e) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r3, 0xffffa000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) 7m58.752450772s ago: executing program 0 (id=2748): syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x6}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x380000, @empty}, 0x1c) ptrace$ARCH_GET_CPUID(0x1e, r0, 0x0, 0x1011) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000000200)=ANY=[@ANYBLOB="60000000020605000000000000000000000000000900020073797a31000000000500040000000000140007800500150040f17c070800124000000000050005000200000005"], 0x60}}, 0x20004890) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_procfs(r0, &(0x7f00000001c0)='net/ip_vs_stats\x00') r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r5}, &(0x7f00000007c0), &(0x7f0000000640)=r4}, 0x20) r6 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171, 0x0, 0x0, 0xf5ffffff}}], 0x400000000000172, 0x0) 7m19.538982299s ago: executing program 9 (id=2781): socket(0x1, 0x5, 0x0) setns(0xc9, 0x0) getpid() socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x79) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r1, 0x88, 0x68, &(0x7f0000000080), 0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/uvc.0\x00', 0x1ff) r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) getsockopt$bt_BT_VOICE(r4, 0x112, 0xb, 0x0, &(0x7f0000000300)) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0x1ff) symlinkat(&(0x7f0000000500)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000540)='./config/usb_gadget/g1/functions/uvc.0/streaming/class/ss/h\x00') 7m18.883142111s ago: executing program 9 (id=2782): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x111, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {r1, 0x1, 0x30, 0x30, 0x0, @in6={0x1b, 0x4000, 0x0, @loopback, 0x10000bff}, @ib={0x1b, 0xd9, 0x100fff, {"4a50abf0c8ed50f638facd57de629163"}, 0x8000000000000001, 0x2, 0x3}}}, 0x118) write$RDMA_USER_CM_CMD_LISTEN(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f00000000c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000080), r1}}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000b7080000230000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2, 0x11, 0xffffffffffffffff, 0x0) r7 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x1000, 0x0, 0x7d, 0x200001ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r7, &(0x7f0000004280)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000940)=""/4096, 0x1000}], 0x1}}], 0x1, 0x40002180, 0x0) sendmmsg(r7, 0x0, 0x0, 0x9200000000000000) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r8, 0xffffffffffffffff, 0x200000000000000) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$packet(0x11, 0x3, 0x300) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[], 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000012c0)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=r9, @ANYBLOB="28000e0080000000ffffffffffff0802110000000802110000000000000000000000000064000100080026006c09000008000c006400000008000d00000000000a0034000202020202020000080035000000000004000501ac9200587878d93e2ba9a1595f798836d3b93f62c16582065edf5f159ab3a7848e27b560b6149013d31c4a60f2b136d624e9b022ef39a5f13235d8a6935a2b49850ad3619713b32083cbde4bbb342781341113374fc5a948c20d755e675fcac4bde046195a3a160e6b390f1e177d292a79746ad5c8cb359eb9084595f0c19ab83106775a908302bba9"], 0x74}}, 0x0) 7m17.814309608s ago: executing program 9 (id=2783): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='fd/4\x00') inotify_add_watch(r1, 0x0, 0x80000802) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0xf, 0x6, 0x0, 0x6, 0x6, 0x6, 0x2002, 0x3}, 0x0) userfaultfd(0x1) close(0x3) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="14000000270001002bbd7000fedbdf25090000009dc293102fd7a26486f5c6844ad91b183ba3b7a83da3a86ea6b9798a63f7894c6588af6a3992b10b68bfbf057ce8a2964c9f81de1f7b844a897317ce2bb7603238b97881dda4ae05000000000000009bf5feb51f478aab6632f9e156d60fa6aeff2306b7faafd11e135e85212a99e39b34b8f4f2de6ad30cf13a8b87b6eab1646be555152af6816874c639b0650021661c3984ed80fe592ad1a863b49e325bd52765acf04bd9fffa50adf4e36a80c903e7a190122550525f9c48bf24519daf318fd40bad25b7091eb26b47dd580e1c7a56cffda62d5df2331739ff9a3adbd76ebe28f19f9340d6cc38f5cc8b9f953235a6ba0c44181bfe96fd7f21e7efb5450023a12eaf65363aa30f4490e46544f1b679e933001f17bf4b4dbdf3cbce2fe4b8c3f33b031e6176a99ff35dec385baae169c9faac5611ea668ce02ee5289fa0354f"], 0x14}}, 0x4004804) r5 = syz_open_dev$ttys(0xc, 0x2, 0x0) r6 = dup2(r5, r5) write$P9_RREADLINK(r6, 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @remote}, 0xc) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x4000050) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="10aed501d8180bc96fb05b0d729821e8011e224982d6a32a49233ff4", @ANYRESOCT, @ANYBLOB="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", @ANYRES64, @ANYRES32=0x0], 0x50) openat$userio(0xffffffffffffff9c, &(0x7f0000000140), 0x22242, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000003c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4c080}, 0x24004040) sendmsg$NL80211_CMD_SET_CQM(r7, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000880)=ANY=[@ANYBLOB="90000000", @ANYRES16, @ANYBLOB="3072a67a023315de450599d8654f486f343cfdeba599fdd315eb75611a909ccfaa9e3422a90c03", @ANYRES32=0x0, @ANYRES8=r5], 0x90}, 0x1, 0x0, 0x0, 0x400c840}, 0x20004010) 7m17.676391787s ago: executing program 9 (id=2784): syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x6}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x380000, @empty}, 0x1c) ptrace$ARCH_GET_CPUID(0x1e, r0, 0x0, 0x1011) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x20004890) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_procfs(r0, &(0x7f00000001c0)='net/ip_vs_stats\x00') r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r5}, &(0x7f00000007c0), &(0x7f0000000640)=r4}, 0x20) r6 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) 7m17.131221143s ago: executing program 9 (id=2785): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2136dbec, 0x800001000089}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0xffffffffffffffff, 0x0, 0x1, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000040)) r1 = socket(0x3, 0x3, 0xff) setsockopt$inet_int(r1, 0x0, 0x3, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x8010, 0xffffffffffffffff, 0x1000) rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000b00)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x01\x83y\xf3\xb2\xe6b$\a\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\b\x00\x00\x00LR\xa1\x00\x00\x17\x1f$^\xe1\x00\x04\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\xce\xd5O\xcc\b\x9e\x19\x19#\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$h\x0ew\x00&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x01\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xff\x06\xe7j\x9fTJ;T\xf3\xfa\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x00\x00\x00\x00\x00\x00\x00\x0f\x81\xf3\x05\xa3{\x96\xf9\xba\x9em\xe9\"\x03\x933P\xbb\xd6\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10\x00\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x131\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00\x00\x00\x8fw\xa9A\xf7m\xeec\xb6\\\xa4T\xeej\xe2\xba\xb2V\xacc\xc6|\xae]\xdb\x10\xb3\x80z\xd5\n\xa3u\xfb\b\x03\xe5\xca;\xe5uH<\x9a\x12\x84(\x9f\xd2\xe1k\x955;J\xa4\x81Lm\x90\x1a\xfdI}\xb0\xa1\xfa9\x17\xd1\xa2\xc7\xca\x98\xaeS\x92Ew`\xd2\x02\xda\xc9\xd4\xea\x02\x1d\xd3\xd5\x81\xdb\xd9~\xd6-:\xee\xe8\t\xf7\xe6\xf1\x88\x86\xb0\x04\x9ep\xb1\x93\x16\xf9\xdb\x15\x8a\xa3h<\xaf\xa0\xb5\xb0\x05ir\xff\xff\xff\xff\x00\x00\x00\x00\x83\x91\xad\x11\xf4\xbcz\x9b\x8bp]o\au\x175I\x1d\xe2\x97\xb6\x06\xdc\x14\x9b>\xd7F\xdb?\xc7%0n/\xf5S\xb5\xe8\xa5\xd1\xddN\xf9ir\xd1r\xf4L\t3\xadDz\\\xf4`\x13\xf7)\x91w\a\xcc+E\xdd\xe9\xdbb\x9c\xff\x98\x03\xb7\x0e=\xba\xa3um\xde\xff$|\xb7\x86j+\x00\x00\x00\x00\x00\x00\x00Z\xef\xd6\xf4Zs\xfc\ro\x03\xabB\x18\xdc\a\xe3\r\x00\x00\x00\x00\x00\x00', 0x6) fallocate(r2, 0x0, 0x0, 0x400001) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r3, &(0x7f0000000000)='3', 0x4e) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r4, 0xffffa000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000240)=0x2) 7m15.930517171s ago: executing program 9 (id=2786): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x111, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {r1, 0x1, 0x30, 0x30, 0x0, @in6={0x1b, 0x4000, 0x0, @loopback, 0x10000bff}, @ib={0x1b, 0xd9, 0x100fff, {"4a50abf0c8ed50f638facd57de629163"}, 0x8000000000000001, 0x2, 0x3}}}, 0x118) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r1, 0x4734}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f00000000c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000080), r1}}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000b7080000230000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2, 0x11, 0xffffffffffffffff, 0x0) r6 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x1000, 0x0, 0x7d, 0x200001ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r6, &(0x7f0000004280)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000940)=""/4096, 0x1000}], 0x1}}], 0x1, 0x40002180, 0x0) sendmmsg(r6, 0x0, 0x0, 0x9200000000000000) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r7, 0xffffffffffffffff, 0x200000000000000) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$packet(0x11, 0x3, 0x300) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xa) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[], 0x24}}, 0x0) 6.306970559s ago: executing program 8 (id=3055): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000400000000000000008500000030000000180100002020702500000000f82020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006b0000009500000000000000"], &(0x7f0000000080)='GPL\x00'}, 0x65) msgget(0x2, 0x180) 5.83453996s ago: executing program 8 (id=3056): r0 = syz_open_dev$video(&(0x7f0000000140), 0xffffffffffffa4d0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@bridge_delneigh={0x1c, 0x1e, 0x1, 0x70bd2f, 0x25dfdbfc, {0xa, 0x0, 0x0, 0x0, 0x0, 0x48, 0x9}}, 0x1c}, 0x1, 0x0, 0x0, 0x24004005}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="5c0000000206010200000000000000000000000014000780080012400006000008000840000000370d000300686173683a6e657400000000050005000200000005000400000000000900020073797a31000000000500010007"], 0x5c}}, 0x8800) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x9, @pix_mp={0x1000, 0x2, 0x32315258, 0x8, 0xc, [{0xe, 0xffff53bb}, {0xc56a, 0x8}, {0xe1, 0x5}, {0x2, 0x4}, {0xffffffff, 0x9}, {0x1ef, 0xd}, {0x5, 0x9}, {0x5, 0xfffffff6}], 0x6, 0x0, 0x4, 0x2, 0x3}}) r3 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r4, 0x2000) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) fadvise64(r5, 0x18, 0x0, 0x4) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000580)={0x0, @in6={{0xa, 0x4e20, 0x1, @empty, 0xffff}}, 0x6, 0x0, 0x3fc, 0x4, 0x32, 0x3, 0xb4}, 0x9c) sendto$inet6(r6, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r6, 0x84, 0x20, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x80) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94) r8 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r8, 0x29, 0xd4, 0x0, 0x0) ioctl$VIDIOC_TRY_ENCODER_CMD(r0, 0xc028564e, &(0x7f0000000000)={0x3, 0x1, [0xfffffffd, 0xf117, 0x1, 0x4, 0x9, 0xc, 0x1, 0x4]}) 4.223686384s ago: executing program 8 (id=3057): socket(0x1, 0x5, 0x0) setns(0xc9, 0x0) getpid() socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x79) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r1, 0x88, 0x68, &(0x7f0000000080), 0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/uvc.0\x00', 0x1ff) r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) getsockopt$bt_BT_VOICE(r5, 0x112, 0xb, 0x0, &(0x7f0000000300)) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0x1ff) symlinkat(&(0x7f0000000500)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000540)='./config/usb_gadget/g1/functions/uvc.0/streaming/class/ss/h\x00') setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000100)=0x2, 0x4) 1.422986668s ago: executing program 8 (id=3058): socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x8000004, 0x2}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={0xffffffffffffffff, 0x0, &(0x7f0000000000)=""/3, 0x2}, 0x20) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000280)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0xffff, 0x2, 0x0, {0xa, 0x0, 0xfffffffe, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x400}}}, 0x32) sendmmsg(r2, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) connect$inet6(r1, &(0x7f0000000440)={0xa, 0x4e01, 0x3, @empty, 0x10000004}, 0x1c) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000180)=ANY=[@ANYBLOB="b8000000190001002bbd700000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000003c00000000000000ffffffffffffffff000000000020000000000000000000000000000000000000000a0000000000009e83000000000000020000000000000801000000000000000101"], 0xb8}}, 0x0) close(0x4) 508.354756ms ago: executing program 8 (id=3059): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_IOVA_RANGES(r0, 0x3b84, &(0x7f0000000100)={0x20, r1, 0x2, 0x0, &(0x7f0000000140)=[{}, {}]}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000180)={0x20, r1, 0x2, 0x0, &(0x7f00000001c0)=[{0x0, 0x1}, {0x3, 0x5}]}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000200)={0x28, 0x7, r1, 0x0, &(0x7f0000000240)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1c, 0x1c}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000280)={0x18, r1}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f00000002c0)={0x28, 0x7, r1, 0x0, &(0x7f0000000300)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1c, 0x2}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f0000000340)={0x18, r1, 0x2, 0x1c}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000380)={0x28, 0x7, r1, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000003c0)={0x18, r1}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(0xffffffffffffffff, 0x3b85, &(0x7f0000000440)={0x28, 0x3, r1, 0x0, &(0x7f0000000480)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1c, 0x2}) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f00000004c0)={0x28, 0x7, r2, r1, 0x1d, 0x3, 0x2}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f0000000500)={0x18, r2, 0x3, 0x1c}) ioctl$IOMMU_DESTROY$ioas(r0, 0x3b80, &(0x7f0000000540)={0x8, r2}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000580)={0x18, r1}) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r0, 0x3b87, &(0x7f00000005c0)={0x18, 0x0, 0x1}) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r0, 0x3b87, &(0x7f0000000600)={0x18, 0x1, 0x1, 0x0, r1}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000640)={0x20, r1, 0x0, 0x0, &(0x7f0000000680)}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f00000006c0)={0x48, 0x1, r1, 0x0, 0x1000, 0x2000}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r1, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000007c0)={0x28, 0x7, r1, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1004000}) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r0, 0x3ba0, &(0x7f0000000800)={0x48, 0x3, r4, 0x0, 0x1004000, 0x1000, &(0x7f0000ffc000)}) ioctl$IOMMU_TEST_OP_MD_CHECK_REFS(r0, 0x3ba0, &(0x7f0000000880)={0x48, 0x4, 0x0, 0x0, 0x1000, &(0x7f0000ffc000), 0x1}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, &(0x7f0000000900)={0x18, r1, 0x1000, 0x1004000}) ioctl$IOMMU_DESTROY$stdev(r0, 0x3b80, &(0x7f0000000940)={0x8, r3}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, r1, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000a00)={0x28, 0x7, r1, 0x0, &(0x7f00000a0000)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL', 0x1000}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000a40)={0x48, 0x7, r5, 0x0, 0x0, 0x0, 0x0, 0x1000}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r0, 0x3ba0, &(0x7f0000000ac0)={0x48, 0x8, r5, 0x0, 0x0, 0x10, &(0x7f0000000b40)='LLLLLLLLLLLLLLLLLLLLLLLLLLLL'}) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000b80)={0x48, 0x6, r5, 0x0, r6}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000c00)={0x18, r1}) close(r5) ioctl$IOMMU_TEST_OP_SET_TEMP_MEMORY_LIMIT(r0, 0x3ba0, &(0x7f0000000c80)={0x48, 0x9, 0x0, 0x0, 0x10}) ioctl$IOMMU_DESTROY$ioas(r0, 0x3b80, &(0x7f0000000d00)={0x8, r1}) close(r0) 0s ago: executing program 8 (id=3060): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001580)={'wlan1\x00'}) syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582"], 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setpriority(0x0, 0x0, 0x0) getsockopt$sock_int(r1, 0x1, 0x2c, 0x0, &(0x7f00000000c0)=0xfdc0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22, 0xe35, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) r3 = fcntl$dupfd(r2, 0x0, r2) r4 = getpid() fcntl$setownex(r3, 0xf, &(0x7f0000000000)={0x1, r4}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000000d40)={0x14, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x400c000}, 0x1) mkdirat(r3, &(0x7f0000000080)='./file0\x00', 0xa2) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000140)={0x3, 0x1, 0xdddd1000, 0x1000, &(0x7f0000fe9000/0x1000)=nil}) ioctl$KVM_TDX_INIT_VM(r6, 0xc008aeba, &(0x7f0000000380)={0x1, 0x0, &(0x7f00000001c0)={0x20, 0x4000, [0x1, 0x40, 0x80000001, 0x1, 0x6, 0x9], [0x0, 0xc0fc, 0x195, 0x2, 0x0, 0x1], [0x100000001, 0x2, 0x9, 0x9, 0xad0, 0x9], '\x00', {0x4, 0x0, [{0x2, 0x9, 0x1, 0x7, 0x40, 0x0, 0x3}, {0x8de4c711fa12dbfc, 0x2, 0x5, 0x7, 0x3, 0x8}, {0x7, 0x1, 0x4, 0xea, 0x4, 0x0, 0x2}, {0x40000001, 0x3, 0x4, 0x5, 0x26530903, 0x3, 0xfffffff8}]}}}) kernel console output (not intermixed with test programs): n_adv: batadv0: Removing interface: batadv_slave_1 [ 1979.438531][ T5611] Bluetooth: hci2: command tx timeout [ 1981.182987][ T2925] hsr_slave_0: left promiscuous mode [ 1981.224275][ T2925] hsr_slave_1: left promiscuous mode [ 1981.225289][ T2925] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1981.254270][ T2925] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1981.483093][ T5611] Bluetooth: hci2: command tx timeout [ 1981.845268][ T2925] team0 (unregistering): Port device team_slave_1 removed [ 1981.905142][ T2925] team0 (unregistering): Port device team_slave_0 removed [ 1983.553876][ T5611] Bluetooth: hci2: command tx timeout [ 1985.690962][ T5611] Bluetooth: hci4: SCO packet for unknown connection handle 200 [ 1985.693610][ T2925] team0 (unregistering): Port device team_slave_1 removed [ 1985.716796][ T5611] Bluetooth: hci4: SCO packet for unknown connection handle 200 [ 1985.763480][ T2925] team0 (unregistering): Port device team_slave_0 removed [ 1988.019402][ T5260] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1989.469530][T18437] mtrr: base(0x20000) is not aligned on a size(0x0000) boundary [ 1989.811715][T11359] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1989.979538][T11359] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1990.006126][T11359] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1990.067948][T11359] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1990.068892][T11359] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1992.273249][T11359] Bluetooth: hci5: command tx timeout [ 1992.671025][T18362] bridge0: port 1(bridge_slave_0) entered blocking state [ 1992.673227][T18362] bridge0: port 1(bridge_slave_0) entered disabled state [ 1992.673473][T18362] bridge_slave_0: entered allmulticast mode [ 1992.678660][T18362] bridge_slave_0: entered promiscuous mode [ 1992.732644][T18362] bridge0: port 2(bridge_slave_1) entered blocking state [ 1992.732885][T18362] bridge0: port 2(bridge_slave_1) entered disabled state [ 1992.813041][T18362] bridge_slave_1: entered allmulticast mode [ 1992.837548][T18362] bridge_slave_1: entered promiscuous mode [ 1994.356026][T11359] Bluetooth: hci5: command tx timeout [ 1994.482842][T18362] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1994.529462][T18362] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1996.432705][T11359] Bluetooth: hci5: command tx timeout [ 1996.549110][T11359] Bluetooth: hci4: SCO packet for unknown connection handle 200 [ 1996.556947][T11359] Bluetooth: hci4: SCO packet for unknown connection handle 200 [ 1996.741728][T18362] team0: Port device team_slave_0 added [ 1996.782057][T18362] team0: Port device team_slave_1 added [ 1996.901175][T18362] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1996.901193][T18362] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1996.901219][T18362] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1997.011322][T18362] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1997.011343][T18362] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1997.011369][T18362] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1998.529129][T11359] Bluetooth: hci5: command tx timeout [ 2000.231636][T18362] hsr_slave_0: entered promiscuous mode [ 2000.243845][T18362] hsr_slave_1: entered promiscuous mode [ 2000.249020][T18362] debugfs: 'hsr0' already exists in 'hsr' [ 2000.249063][T18362] Cannot create hsr debugfs directory [ 2001.917428][T18439] bridge0: port 1(bridge_slave_0) entered blocking state [ 2001.917761][T18439] bridge0: port 1(bridge_slave_0) entered disabled state [ 2001.917990][T18439] bridge_slave_0: entered allmulticast mode [ 2001.921201][T18439] bridge_slave_0: entered promiscuous mode [ 2001.988002][T18439] bridge0: port 2(bridge_slave_1) entered blocking state [ 2001.988132][T18439] bridge0: port 2(bridge_slave_1) entered disabled state [ 2001.988265][T18439] bridge_slave_1: entered allmulticast mode [ 2001.990722][T18439] bridge_slave_1: entered promiscuous mode [ 2002.621610][T18536] mtrr: base(0x20000) is not aligned on a size(0x0000) boundary [ 2002.949401][T18439] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2003.030612][T18439] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2003.202938][T18439] team0: Port device team_slave_0 added [ 2003.209229][T18439] team0: Port device team_slave_1 added [ 2003.313945][T18543] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2005.121821][T18439] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2005.121843][T18439] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2005.121872][T18439] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2005.228287][T18439] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2005.228309][T18439] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2005.228341][T18439] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2005.674253][ T2925] bridge_slave_1: left allmulticast mode [ 2005.674298][ T2925] bridge_slave_1: left promiscuous mode [ 2005.674615][ T2925] bridge0: port 2(bridge_slave_1) entered disabled state [ 2005.894672][ T2925] bridge_slave_0: left allmulticast mode [ 2005.894715][ T2925] bridge_slave_0: left promiscuous mode [ 2005.895010][ T2925] bridge0: port 1(bridge_slave_0) entered disabled state [ 2006.186104][ T2925] bridge_slave_1: left allmulticast mode [ 2006.186148][ T2925] bridge_slave_1: left promiscuous mode [ 2006.186434][ T2925] bridge0: port 2(bridge_slave_1) entered disabled state [ 2006.378196][ T2925] bridge_slave_0: left allmulticast mode [ 2006.378242][ T2925] bridge_slave_0: left promiscuous mode [ 2006.378600][ T2925] bridge0: port 1(bridge_slave_0) entered disabled state [ 2007.033942][ T2925] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2007.116329][ T2925] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2007.179205][ T2925] bond0 (unregistering): Released all slaves [ 2007.666643][ T2925] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2007.775037][ T2925] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2008.152015][T18570] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2008.165153][ T2925] bond0 (unregistering): Released all slaves [ 2008.285536][ T5260] 8021q: adding VLAN 0 to HW filter on device eth1 [ 2008.940529][T18439] hsr_slave_0: entered promiscuous mode [ 2008.945431][T18439] hsr_slave_1: entered promiscuous mode [ 2008.946487][T18439] debugfs: 'hsr0' already exists in 'hsr' [ 2008.946512][T18439] Cannot create hsr debugfs directory [ 2009.299016][T18574] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2009.701604][ T5611] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2009.810964][ T5611] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2009.821610][ T5611] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2009.879620][ T5611] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2009.883688][ T5611] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2011.672720][ T2925] hsr_slave_0: left promiscuous mode [ 2011.735704][ T2925] hsr_slave_1: left promiscuous mode [ 2011.737098][ T2925] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2011.776925][ T2925] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2012.167459][ T2925] hsr_slave_0: left promiscuous mode [ 2012.211957][ T2925] hsr_slave_1: left promiscuous mode [ 2012.220258][ T2925] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2012.272542][ T5611] Bluetooth: hci1: command tx timeout [ 2012.290680][ T2925] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2013.221508][ T2925] team0 (unregistering): Port device team_slave_1 removed [ 2013.295867][ T2925] team0 (unregistering): Port device team_slave_0 removed [ 2014.352486][ T5611] Bluetooth: hci1: command tx timeout [ 2016.461250][ T5611] Bluetooth: hci1: command tx timeout [ 2018.301543][ T2925] team0 (unregistering): Port device team_slave_1 removed [ 2018.592481][ T5611] Bluetooth: hci1: command tx timeout [ 2019.142731][ T2925] team0 (unregistering): Port device team_slave_0 removed [ 2020.685910][ T5260] 8021q: adding VLAN 0 to HW filter on device eth2 [ 2026.631553][T11359] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2026.773184][T11359] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2026.808683][T11359] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2026.820087][T11359] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2026.833756][T11359] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2028.665428][ T5260] 8021q: adding VLAN 0 to HW filter on device eth3 [ 2029.172201][ T5611] Bluetooth: hci3: command tx timeout [ 2029.188920][T18661] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2029.691171][T18577] bridge0: port 1(bridge_slave_0) entered blocking state [ 2029.691372][T18577] bridge0: port 1(bridge_slave_0) entered disabled state [ 2029.691518][T18577] bridge_slave_0: entered allmulticast mode [ 2029.696858][T18577] bridge_slave_0: entered promiscuous mode [ 2029.723160][T18577] bridge0: port 2(bridge_slave_1) entered blocking state [ 2029.723329][T18577] bridge0: port 2(bridge_slave_1) entered disabled state [ 2029.723472][T18577] bridge_slave_1: entered allmulticast mode [ 2029.726985][T18577] bridge_slave_1: entered promiscuous mode [ 2031.232310][ T5611] Bluetooth: hci3: command tx timeout [ 2033.324929][ T5611] Bluetooth: hci3: command tx timeout [ 2033.515753][T18577] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2033.575103][T18577] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2034.566240][T18577] team0: Port device team_slave_0 added [ 2035.475890][ T5611] Bluetooth: hci3: command tx timeout [ 2035.595846][T18577] team0: Port device team_slave_1 added [ 2035.902286][T18577] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2035.902308][T18577] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2035.902339][T18577] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2035.962202][T18577] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2035.962224][T18577] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2035.962255][T18577] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2036.253883][T18577] hsr_slave_0: entered promiscuous mode [ 2036.255464][T18577] hsr_slave_1: entered promiscuous mode [ 2036.256817][T18577] debugfs: 'hsr0' already exists in 'hsr' [ 2036.256847][T18577] Cannot create hsr debugfs directory [ 2037.718854][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 2038.837274][T11359] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2038.901094][T11359] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2038.930588][T11359] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2038.939915][T11359] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2038.941099][T11359] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2041.076414][ T5611] Bluetooth: hci0: command tx timeout [ 2042.432120][T18646] bridge0: port 1(bridge_slave_0) entered blocking state [ 2042.432262][T18646] bridge0: port 1(bridge_slave_0) entered disabled state [ 2042.432874][T18646] bridge_slave_0: entered allmulticast mode [ 2042.440884][T18646] bridge_slave_0: entered promiscuous mode [ 2042.693645][T18646] bridge0: port 2(bridge_slave_1) entered blocking state [ 2042.693735][T18646] bridge0: port 2(bridge_slave_1) entered disabled state [ 2042.693881][T18646] bridge_slave_1: entered allmulticast mode [ 2042.742561][T18646] bridge_slave_1: entered promiscuous mode [ 2043.195480][ T5611] Bluetooth: hci0: command tx timeout [ 2045.233681][ T5611] Bluetooth: hci0: command tx timeout [ 2046.067145][T18646] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2046.103192][T18646] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2046.807809][T18646] team0: Port device team_slave_0 added [ 2046.905085][T18646] team0: Port device team_slave_1 added [ 2047.322668][ T5611] Bluetooth: hci0: command tx timeout [ 2050.338895][T18646] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2050.338909][T18646] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2050.338926][T18646] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2050.496325][ T5260] 8021q: adding VLAN 0 to HW filter on device eth1 [ 2050.500927][T18646] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2050.500941][T18646] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2050.500959][T18646] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2051.140129][T18646] hsr_slave_0: entered promiscuous mode [ 2051.149448][T18646] hsr_slave_1: entered promiscuous mode [ 2051.158673][T18646] debugfs: 'hsr0' already exists in 'hsr' [ 2051.158763][T18646] Cannot create hsr debugfs directory [ 2053.688267][T11359] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2053.742083][T11359] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2053.747519][T11359] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2053.774474][T11359] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2053.780700][T11359] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2056.111952][T11359] Bluetooth: hci2: command tx timeout [ 2058.191847][T11359] Bluetooth: hci2: command tx timeout [ 2060.297536][T11359] Bluetooth: hci2: command tx timeout [ 2062.351862][T11359] Bluetooth: hci2: command tx timeout [ 2063.181669][ T5260] 8021q: adding VLAN 0 to HW filter on device eth2 [ 2063.876575][T18725] bridge0: port 1(bridge_slave_0) entered blocking state [ 2063.876847][T18725] bridge0: port 1(bridge_slave_0) entered disabled state [ 2063.881946][T18725] bridge_slave_0: entered allmulticast mode [ 2063.887019][T18725] bridge_slave_0: entered promiscuous mode [ 2063.893595][T18725] bridge0: port 2(bridge_slave_1) entered blocking state [ 2063.893778][T18725] bridge0: port 2(bridge_slave_1) entered disabled state [ 2063.939190][T18725] bridge_slave_1: entered allmulticast mode [ 2063.959475][T18725] bridge_slave_1: entered promiscuous mode [ 2064.269068][T18725] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2064.320977][T18725] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2065.920884][T18725] team0: Port device team_slave_0 added [ 2068.257972][T18725] team0: Port device team_slave_1 added [ 2068.286142][ T5260] 8021q: adding VLAN 0 to HW filter on device eth3 [ 2070.687303][T18725] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2070.687327][T18725] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2070.687369][T18725] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2071.273325][T18725] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2071.273399][T18725] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2071.273431][T18725] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2071.761904][ T2925] bridge_slave_1: left allmulticast mode [ 2071.761936][ T2925] bridge_slave_1: left promiscuous mode [ 2071.762154][ T2925] bridge0: port 2(bridge_slave_1) entered disabled state [ 2071.875593][ T2925] bridge_slave_0: left allmulticast mode [ 2071.875639][ T2925] bridge_slave_0: left promiscuous mode [ 2071.875975][ T2925] bridge0: port 1(bridge_slave_0) entered disabled state [ 2072.580557][ T2925] bridge_slave_1: left allmulticast mode [ 2072.580603][ T2925] bridge_slave_1: left promiscuous mode [ 2072.580885][ T2925] bridge0: port 2(bridge_slave_1) entered disabled state [ 2072.807972][ T5611] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2072.869809][ T5611] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2072.869857][ T2925] bridge_slave_0: left allmulticast mode [ 2072.869890][ T2925] bridge_slave_0: left promiscuous mode [ 2072.870130][ T2925] bridge0: port 1(bridge_slave_0) entered disabled state [ 2072.898847][ T5611] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2072.934278][ T5611] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2072.946572][ T5611] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2073.441645][ T2925] bridge_slave_1: left allmulticast mode [ 2073.441692][ T2925] bridge_slave_1: left promiscuous mode [ 2073.441971][ T2925] bridge0: port 2(bridge_slave_1) entered disabled state [ 2073.562548][ T2925] bridge_slave_0: left allmulticast mode [ 2073.562586][ T2925] bridge_slave_0: left promiscuous mode [ 2073.562819][ T2925] bridge0: port 1(bridge_slave_0) entered disabled state [ 2075.314917][ T5611] Bluetooth: hci5: command tx timeout [ 2076.875560][ T2925] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2076.982586][ T2925] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2077.074767][ T2925] bond0 (unregistering): Released all slaves [ 2077.401489][ T5611] Bluetooth: hci5: command tx timeout [ 2077.997376][ T2925] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2079.471728][ T5611] Bluetooth: hci5: command tx timeout [ 2079.762634][ T2925] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2079.845627][ T2925] bond0 (unregistering): Released all slaves [ 2080.291874][ T2925] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2080.402322][ T2925] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2080.534074][ T2925] bond0 (unregistering): Released all slaves [ 2080.643970][T18725] hsr_slave_0: entered promiscuous mode [ 2080.646954][T18725] hsr_slave_1: entered promiscuous mode [ 2080.649469][T18725] debugfs: 'hsr0' already exists in 'hsr' [ 2080.649661][T18725] Cannot create hsr debugfs directory [ 2081.551519][ T5611] Bluetooth: hci5: command tx timeout [ 2082.411350][T14371] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 2082.612386][T14371] usb 9-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 2082.613887][T14371] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2082.613917][T14371] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2082.613956][T14371] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2082.618810][T14371] usb 9-1: config 0 descriptor?? [ 2082.667768][ T2925] hsr_slave_0: left promiscuous mode [ 2082.701477][ T2925] hsr_slave_1: left promiscuous mode [ 2082.702423][ T2925] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2082.753013][ T2925] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2082.873122][T18930] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2935'. [ 2082.891572][ T2925] hsr_slave_0: left promiscuous mode [ 2082.911611][ T2925] hsr_slave_1: left promiscuous mode [ 2082.913084][ T2925] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2082.962205][ T2925] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2083.102628][ T2925] hsr_slave_0: left promiscuous mode [ 2083.122358][ T2925] hsr_slave_1: left promiscuous mode [ 2083.123431][ T2925] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2083.172401][ T2925] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2083.602765][ T2925] team0 (unregistering): Port device team_slave_1 removed [ 2083.652247][ T2925] team0 (unregistering): Port device team_slave_0 removed [ 2083.801666][ T48] kworker/u8:2 (48) used greatest stack depth: 16808 bytes left [ 2084.172139][ T2925] team0 (unregistering): Port device team_slave_1 removed [ 2084.222596][ T2925] team0 (unregistering): Port device team_slave_0 removed [ 2084.754413][ T2925] team0 (unregistering): Port device team_slave_1 removed [ 2084.804202][ T2925] team0 (unregistering): Port device team_slave_0 removed [ 2085.027808][T14371] usb 9-1: USB disconnect, device number 6 [ 2085.902309][T18807] bridge0: port 1(bridge_slave_0) entered blocking state [ 2085.902434][T18807] bridge0: port 1(bridge_slave_0) entered disabled state [ 2085.902601][T18807] bridge_slave_0: entered allmulticast mode [ 2085.904854][T18807] bridge_slave_0: entered promiscuous mode [ 2086.021583][ T5722] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 2086.026602][T18807] bridge0: port 2(bridge_slave_1) entered blocking state [ 2086.026721][T18807] bridge0: port 2(bridge_slave_1) entered disabled state [ 2086.026895][T18807] bridge_slave_1: entered allmulticast mode [ 2086.028645][T18807] bridge_slave_1: entered promiscuous mode [ 2086.172534][ T5722] usb 9-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 2086.174844][ T5722] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2086.174875][ T5722] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2086.174918][ T5722] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2086.224437][ T5722] usb 9-1: config 0 descriptor?? [ 2086.337974][T18807] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2086.362579][T18807] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2086.442879][T18941] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2936'. [ 2086.489697][ T5722] usb 9-1: USB disconnect, device number 7 [ 2086.919105][T18807] team0: Port device team_slave_0 added [ 2086.974198][T18807] team0: Port device team_slave_1 added [ 2087.269027][T18807] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2087.269049][T18807] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2087.269127][T18807] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2087.507798][T18807] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2087.507820][T18807] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2087.507848][T18807] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2087.923406][T11359] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 2088.011755][T11359] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 2088.014933][T11359] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 2088.021319][T14371] usb 9-1: new full-speed USB device number 8 using dummy_hcd [ 2088.042842][T11359] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 2088.048473][T11359] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 2088.200010][T14371] usb 9-1: not running at top speed; connect to a high speed hub [ 2088.200059][T14371] usb 9-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 2088.202486][T14371] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x88 has invalid maxpacket 12336, setting to 64 [ 2088.222155][T14371] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2088.222185][T14371] usb 9-1: Product: syz [ 2088.222200][T14371] usb 9-1: Manufacturer: syz [ 2088.222214][T14371] usb 9-1: SerialNumber: syz [ 2088.382776][T14371] keyspan 9-1:1.0: Keyspan 4 port adapter converter detected [ 2088.383864][T14371] keyspan 9-1:1.0: unsupported endpoint type 0 [ 2088.556412][T14371] usb 9-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 2088.566730][T14371] usb 9-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 2088.583700][T14371] usb 9-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 2088.728910][T14371] usb 9-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 2088.808719][T14371] usb 9-1: USB disconnect, device number 8 [ 2088.870506][T14371] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 2088.899242][T14371] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 2088.930408][T14371] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 2089.039967][T14371] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 2089.041845][T14371] keyspan 9-1:1.0: device disconnected [ 2089.521446][T14182] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 2089.676274][T14182] usb 9-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 2089.679713][T14182] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2089.679740][T14182] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2089.679772][T14182] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2089.766088][T14182] usb 9-1: config 0 descriptor?? [ 2090.000246][T18956] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2938'. [ 2090.177121][T14371] usb 9-1: USB disconnect, device number 9 [ 2090.231405][T18807] hsr_slave_0: entered promiscuous mode [ 2090.236088][T18807] hsr_slave_1: entered promiscuous mode [ 2090.271397][ T5611] Bluetooth: hci6: command tx timeout [ 2090.547094][T18889] bridge0: port 1(bridge_slave_0) entered blocking state [ 2090.547364][T18889] bridge0: port 1(bridge_slave_0) entered disabled state [ 2090.547997][T18889] bridge_slave_0: entered allmulticast mode [ 2090.563316][T18889] bridge_slave_0: entered promiscuous mode [ 2091.019789][T18889] bridge0: port 2(bridge_slave_1) entered blocking state [ 2091.020080][T18889] bridge0: port 2(bridge_slave_1) entered disabled state [ 2091.020272][T18889] bridge_slave_1: entered allmulticast mode [ 2091.024825][T18889] bridge_slave_1: entered promiscuous mode [ 2091.165414][T18889] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2091.209436][T18889] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2092.233531][T18889] team0: Port device team_slave_0 added [ 2092.354407][ T5611] Bluetooth: hci6: command tx timeout [ 2094.441229][ T5611] Bluetooth: hci6: command tx timeout [ 2094.869508][T18889] team0: Port device team_slave_1 added [ 2095.074702][ T2925] bridge_slave_1: left allmulticast mode [ 2095.074747][ T2925] bridge_slave_1: left promiscuous mode [ 2095.075053][ T2925] bridge0: port 2(bridge_slave_1) entered disabled state [ 2095.224741][T14371] usb 9-1: new full-speed USB device number 10 using dummy_hcd [ 2095.294647][ T2925] bridge_slave_0: left allmulticast mode [ 2095.294680][ T2925] bridge_slave_0: left promiscuous mode [ 2095.294864][ T2925] bridge0: port 1(bridge_slave_0) entered disabled state [ 2095.373062][T14371] usb 9-1: not running at top speed; connect to a high speed hub [ 2095.373117][T14371] usb 9-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 2095.375945][T14371] usb 9-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 2095.376008][T14371] usb 9-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 6 [ 2095.379613][T14371] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2095.379641][T14371] usb 9-1: Product: syz [ 2095.379658][T14371] usb 9-1: Manufacturer: syz [ 2095.379675][T14371] usb 9-1: SerialNumber: syz [ 2095.422207][T14371] keyspan 9-1:1.0: Keyspan 4 port adapter converter detected [ 2095.423174][T14371] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 81 [ 2095.423253][T14371] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 88 [ 2095.442616][T14371] usb 9-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 2095.473507][T14371] usb 9-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 2095.503110][T14371] usb 9-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 2095.524386][T14371] usb 9-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 2095.672462][ T2925] bridge_slave_1: left allmulticast mode [ 2095.672507][ T2925] bridge_slave_1: left promiscuous mode [ 2095.672789][ T2925] bridge0: port 2(bridge_slave_1) entered disabled state [ 2095.703137][T14371] usb 9-1: USB disconnect, device number 10 [ 2095.730559][T14371] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 2095.738005][T14371] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 2095.744763][T14371] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 2095.757436][T14371] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 2095.770777][T14371] keyspan 9-1:1.0: device disconnected [ 2095.913090][ T2925] bridge_slave_0: left allmulticast mode [ 2095.913133][ T2925] bridge_slave_0: left promiscuous mode [ 2095.913409][ T2925] bridge0: port 1(bridge_slave_0) entered disabled state [ 2096.211404][ T2925] bridge_slave_1: left allmulticast mode [ 2096.211436][ T2925] bridge_slave_1: left promiscuous mode [ 2096.211653][ T2925] bridge0: port 2(bridge_slave_1) entered disabled state [ 2096.372508][ T2925] bridge_slave_0: left allmulticast mode [ 2096.372539][ T2925] bridge_slave_0: left promiscuous mode [ 2096.372757][ T2925] bridge0: port 1(bridge_slave_0) entered disabled state [ 2096.511378][ T5611] Bluetooth: hci6: command tx timeout [ 2096.801955][ T2925] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2096.882003][ T2925] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2096.943982][ T2925] bond0 (unregistering): Released all slaves [ 2097.247102][T11359] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2097.301849][T11359] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2097.320627][T11359] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2097.345025][T11359] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2097.347670][T11359] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2097.514165][ T2925] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2097.611874][ T2925] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2097.673546][ T2925] bond0 (unregistering): Released all slaves [ 2097.943822][ T2925] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2099.167976][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 2099.185665][ T2925] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2099.272803][ T2925] bond0 (unregistering): Released all slaves [ 2099.471357][T11359] Bluetooth: hci1: command tx timeout [ 2100.162498][T18889] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2100.162520][T18889] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2100.162549][T18889] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2100.243938][T18889] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2100.243957][T18889] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2100.243983][T18889] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2101.254469][T18932] usb 9-1: new full-speed USB device number 11 using dummy_hcd [ 2101.274646][T18889] hsr_slave_0: entered promiscuous mode [ 2101.276206][T18889] hsr_slave_1: entered promiscuous mode [ 2101.277236][T18889] debugfs: 'hsr0' already exists in 'hsr' [ 2101.277263][T18889] Cannot create hsr debugfs directory [ 2101.413665][T18932] usb 9-1: not running at top speed; connect to a high speed hub [ 2101.413713][T18932] usb 9-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 2101.415550][T18932] usb 9-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 2101.415621][T18932] usb 9-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 6 [ 2101.419194][T18932] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2101.419222][T18932] usb 9-1: Product: syz [ 2101.419238][T18932] usb 9-1: Manufacturer: syz [ 2101.419255][T18932] usb 9-1: SerialNumber: syz [ 2101.438753][T18932] keyspan 9-1:1.0: Keyspan 4 port adapter converter detected [ 2101.439645][T18932] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 81 [ 2101.439716][T18932] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 88 [ 2101.504290][T18932] usb 9-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 2101.522755][T18932] usb 9-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 2101.527687][T18932] usb 9-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 2101.533905][T18932] usb 9-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 2101.561291][T11359] Bluetooth: hci1: command tx timeout [ 2101.666872][ T2925] hsr_slave_0: left promiscuous mode [ 2101.733923][ T2925] hsr_slave_1: left promiscuous mode [ 2101.738291][ T2925] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2101.747121][T18932] usb 9-1: USB disconnect, device number 11 [ 2101.776754][T18932] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 2101.785245][T18932] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 2101.791908][T18932] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 2101.799946][T18932] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 2101.801623][T18932] keyspan 9-1:1.0: device disconnected [ 2101.837108][ T2925] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2102.012465][ T2925] hsr_slave_0: left promiscuous mode [ 2102.033185][ T2925] hsr_slave_1: left promiscuous mode [ 2102.034054][ T2925] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2102.082207][ T2925] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2102.241282][ T2925] hsr_slave_0: left promiscuous mode [ 2102.261326][ T2925] hsr_slave_1: left promiscuous mode [ 2102.265398][ T2925] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2102.311777][ T2925] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2102.762047][ T2925] team0 (unregistering): Port device team_slave_1 removed [ 2102.811966][ T2925] team0 (unregistering): Port device team_slave_0 removed [ 2103.650457][T11359] Bluetooth: hci1: command tx timeout [ 2105.711683][T11359] Bluetooth: hci1: command tx timeout [ 2106.366980][ T2925] team0 (unregistering): Port device team_slave_1 removed [ 2106.505501][ T2925] team0 (unregistering): Port device team_slave_0 removed [ 2107.332698][ T2925] team0 (unregistering): Port device team_slave_1 removed [ 2107.351009][T18932] usb 9-1: new full-speed USB device number 12 using dummy_hcd [ 2107.381786][ T2925] team0 (unregistering): Port device team_slave_0 removed [ 2107.503073][T18932] usb 9-1: not running at top speed; connect to a high speed hub [ 2107.503119][T18932] usb 9-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 2107.504467][T18932] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 2107.507163][T18932] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2107.507191][T18932] usb 9-1: Product: syz [ 2107.507206][T18932] usb 9-1: Manufacturer: syz [ 2107.507221][T18932] usb 9-1: SerialNumber: syz [ 2107.601215][T18932] keyspan 9-1:1.0: Keyspan 4 port adapter converter detected [ 2107.602285][T18932] keyspan 9-1:1.0: unsupported endpoint type 0 [ 2107.647872][T18932] usb 9-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 2107.697769][T18932] usb 9-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 2107.736129][T18932] usb 9-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 2107.772043][T18932] usb 9-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 2107.843516][T18932] usb 9-1: USB disconnect, device number 12 [ 2107.916560][T18932] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 2107.939687][T18932] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 2107.962405][T18932] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 2107.968985][T18932] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 2107.995970][T18932] keyspan 9-1:1.0: device disconnected [ 2108.871071][T16120] usb 9-1: new full-speed USB device number 13 using dummy_hcd [ 2109.682893][T16120] usb 9-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 2109.688062][T16120] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 2109.688107][T16120] usb 9-1: can't read configurations, error -71 [ 2110.761214][T16120] usb 9-1: new full-speed USB device number 14 using dummy_hcd [ 2110.921592][T18807] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2110.963654][T16120] usb 9-1: not running at top speed; connect to a high speed hub [ 2110.963701][T16120] usb 9-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 2110.970026][T16120] usb 9-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 2110.970091][T16120] usb 9-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 6 [ 2111.020363][T16120] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2111.020395][T16120] usb 9-1: Product: syz [ 2111.020411][T16120] usb 9-1: Manufacturer: syz [ 2111.020425][T16120] usb 9-1: SerialNumber: syz [ 2111.058184][T18807] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2111.065586][T18947] bridge0: port 1(bridge_slave_0) entered blocking state [ 2111.065718][T18947] bridge0: port 1(bridge_slave_0) entered disabled state [ 2111.066320][T18947] bridge_slave_0: entered allmulticast mode [ 2111.068728][T16120] keyspan 9-1:1.0: Keyspan 4 port adapter converter detected [ 2111.074645][T16120] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 81 [ 2111.074738][T16120] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 88 [ 2111.080472][T18947] bridge_slave_0: entered promiscuous mode [ 2111.095041][T16120] usb 9-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 2111.164031][T18807] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2111.167171][T16120] usb 9-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 2111.202102][T16120] usb 9-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 2111.215293][T16120] usb 9-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 2111.462668][T14371] usb 9-1: USB disconnect, device number 14 [ 2111.514834][T18807] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2111.549284][T18947] bridge0: port 2(bridge_slave_1) entered blocking state [ 2111.549438][T18947] bridge0: port 2(bridge_slave_1) entered disabled state [ 2111.549666][T18947] bridge_slave_1: entered allmulticast mode [ 2111.590681][T14371] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 2111.592118][T18947] bridge_slave_1: entered promiscuous mode [ 2111.649462][T14371] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 2111.674762][T14371] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 2111.711692][T14371] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 2111.717236][T14371] keyspan 9-1:1.0: device disconnected [ 2112.127991][T18947] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2112.834487][ T5611] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2112.909803][ T5611] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2112.978015][ T5611] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2112.985751][ T5611] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2112.989013][ T5611] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2113.641213][T18947] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2114.061370][T18931] usb 9-1: new full-speed USB device number 15 using dummy_hcd [ 2114.264753][T18931] usb 9-1: not running at top speed; connect to a high speed hub [ 2114.264802][T18931] usb 9-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 2114.267077][T18931] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2114.267178][T18931] usb 9-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 2114.322048][T18931] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2114.322085][T18931] usb 9-1: Product: syz [ 2114.322103][T18931] usb 9-1: Manufacturer: syz [ 2114.322119][T18931] usb 9-1: SerialNumber: syz [ 2114.464554][T18931] keyspan 9-1:1.0: Keyspan 4 port adapter converter detected [ 2114.465591][T18931] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 81 [ 2114.465677][T18931] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 88 [ 2114.501347][T18931] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 1 [ 2114.555917][T18931] usb 9-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 2114.560003][T18931] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 2 [ 2114.586995][T18931] usb 9-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 2114.621127][T18931] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 4 [ 2114.638549][T18931] usb 9-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 2114.741803][T18931] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 6 [ 2114.755954][T18931] usb 9-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 2114.826815][T18931] usb 9-1: USB disconnect, device number 15 [ 2114.942178][T18931] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 2114.984520][T18931] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 2114.997762][T18931] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 2115.185230][T18931] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 2115.186308][T18931] keyspan 9-1:1.0: device disconnected [ 2115.223515][T18947] team0: Port device team_slave_0 added [ 2115.280496][T18947] team0: Port device team_slave_1 added [ 2115.312614][T19039] Bluetooth: hci0: command tx timeout [ 2115.654241][T18947] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2115.654264][T18947] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2115.654293][T18947] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2115.707773][T18947] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2115.707795][T18947] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2115.707823][T18947] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2115.750945][T14182] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 2115.889297][T18889] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 2115.901679][T14182] usb 9-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 2115.903187][T14182] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2115.903217][T14182] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2115.903258][T14182] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2115.952577][T14182] usb 9-1: config 0 descriptor?? [ 2115.972031][T18889] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2116.023399][T18889] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 2116.084125][T18889] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2116.223999][T19050] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2952'. [ 2116.246040][T18947] hsr_slave_0: entered promiscuous mode [ 2116.247762][T18947] hsr_slave_1: entered promiscuous mode [ 2116.248990][T18947] debugfs: 'hsr0' already exists in 'hsr' [ 2116.249019][T18947] Cannot create hsr debugfs directory [ 2116.249909][T18889] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 2116.330445][T18889] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2116.332265][T18983] bridge0: port 1(bridge_slave_0) entered blocking state [ 2116.332457][T18983] bridge0: port 1(bridge_slave_0) entered disabled state [ 2116.332888][T18983] bridge_slave_0: entered allmulticast mode [ 2116.339744][T18983] bridge_slave_0: entered promiscuous mode [ 2116.349310][T14371] usb 9-1: USB disconnect, device number 16 [ 2116.423549][T18889] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 2116.467943][T18889] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2116.469157][T18983] bridge0: port 2(bridge_slave_1) entered blocking state [ 2116.469390][T18983] bridge0: port 2(bridge_slave_1) entered disabled state [ 2116.469601][T18983] bridge_slave_1: entered allmulticast mode [ 2116.474823][T18983] bridge_slave_1: entered promiscuous mode [ 2116.885848][T18983] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2117.012911][T18983] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2117.360843][T18932] usb 9-1: new full-speed USB device number 17 using dummy_hcd [ 2117.391469][T19039] Bluetooth: hci0: command tx timeout [ 2117.523597][T18932] usb 9-1: not running at top speed; connect to a high speed hub [ 2117.523645][T18932] usb 9-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 2117.524991][T18932] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x88 has invalid maxpacket 12336, setting to 64 [ 2117.527558][T18932] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2117.527586][T18932] usb 9-1: Product: syz [ 2117.527598][T18932] usb 9-1: Manufacturer: syz [ 2117.527607][T18932] usb 9-1: SerialNumber: syz [ 2117.604917][T18932] keyspan 9-1:1.0: Keyspan 4 port adapter converter detected [ 2117.605524][T18932] keyspan 9-1:1.0: unsupported endpoint type 0 [ 2117.704122][T18932] usb 9-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 2117.776009][T18983] team0: Port device team_slave_0 added [ 2117.937341][T18932] usb 9-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 2117.979853][T18932] usb 9-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 2118.005993][T18932] usb 9-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 2118.032950][T18983] team0: Port device team_slave_1 added [ 2118.066627][T18932] usb 9-1: USB disconnect, device number 17 [ 2118.108519][T18932] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 2118.123557][T18932] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 2118.152107][T18932] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 2118.180356][T18932] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 2118.227527][T18932] keyspan 9-1:1.0: device disconnected [ 2118.739254][T18983] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2118.739272][T18983] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2118.739289][T18983] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2118.828420][T18983] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2118.828441][T18983] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2118.828470][T18983] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2119.074513][ T5722] usb 9-1: new full-speed USB device number 18 using dummy_hcd [ 2119.471042][T19039] Bluetooth: hci0: command tx timeout [ 2119.556041][ T5722] usb 9-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 2119.558960][ T5722] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 2119.559005][ T5722] usb 9-1: can't read configurations, error -71 [ 2120.880386][T18983] hsr_slave_0: entered promiscuous mode [ 2120.901859][T18983] hsr_slave_1: entered promiscuous mode [ 2120.902723][T18983] debugfs: 'hsr0' already exists in 'hsr' [ 2120.902749][T18983] Cannot create hsr debugfs directory [ 2121.569397][T19039] Bluetooth: hci0: command tx timeout [ 2125.692342][T18932] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 2125.772879][T18947] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2125.803972][T18947] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2125.848257][T18932] usb 9-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 2125.849676][T18932] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2125.849702][T18932] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2125.849742][T18932] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2125.911199][T18932] usb 9-1: config 0 descriptor?? [ 2125.938849][T18947] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2125.996945][T18947] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2126.076662][T18947] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2126.116396][T18947] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2126.135375][T19036] bridge0: port 1(bridge_slave_0) entered blocking state [ 2126.135641][T19036] bridge0: port 1(bridge_slave_0) entered disabled state [ 2126.135837][T19036] bridge_slave_0: entered allmulticast mode [ 2126.138993][T19036] bridge_slave_0: entered promiscuous mode [ 2126.143249][T19148] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2958'. [ 2126.182941][T18947] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2126.215158][T18947] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2126.228299][T19036] bridge0: port 2(bridge_slave_1) entered blocking state [ 2126.228411][T19036] bridge0: port 2(bridge_slave_1) entered disabled state [ 2126.228523][T19036] bridge_slave_1: entered allmulticast mode [ 2126.233939][ T5722] usb 9-1: USB disconnect, device number 20 [ 2126.272060][T19036] bridge_slave_1: entered promiscuous mode [ 2126.493421][T19036] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2126.514037][T19036] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2126.849083][T19036] team0: Port device team_slave_0 added [ 2126.862029][T19036] team0: Port device team_slave_1 added [ 2126.868913][T18889] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2127.054053][T19036] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2127.054069][T19036] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2127.054085][T19036] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2127.107655][T19036] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2127.107670][T19036] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2127.107688][T19036] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2127.284630][T18889] 8021q: adding VLAN 0 to HW filter on device team0 [ 2127.379615][T19036] hsr_slave_0: entered promiscuous mode [ 2127.383560][T19036] hsr_slave_1: entered promiscuous mode [ 2127.384604][T19036] debugfs: 'hsr0' already exists in 'hsr' [ 2127.384630][T19036] Cannot create hsr debugfs directory [ 2127.566176][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 2127.566465][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2127.917798][ T2929] bridge0: port 2(bridge_slave_1) entered blocking state [ 2127.917944][ T2929] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2128.595881][T18947] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2129.240691][ T5260] 8021q: adding VLAN 0 to HW filter on device eth1 [ 2129.266667][T18947] 8021q: adding VLAN 0 to HW filter on device team0 [ 2129.317586][T17003] bridge0: port 1(bridge_slave_0) entered blocking state [ 2129.317928][T17003] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2129.708328][T17003] bridge0: port 2(bridge_slave_1) entered blocking state [ 2129.709696][T17003] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2129.910734][T18931] usb 9-1: new full-speed USB device number 21 using dummy_hcd [ 2130.082975][T18931] usb 9-1: not running at top speed; connect to a high speed hub [ 2130.083026][T18931] usb 9-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 2130.085882][T18931] usb 9-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 2130.085947][T18931] usb 9-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 6 [ 2130.166742][T18931] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2130.166776][T18931] usb 9-1: Product: syz [ 2130.166794][T18931] usb 9-1: Manufacturer: syz [ 2130.166811][T18931] usb 9-1: SerialNumber: syz [ 2130.207189][T18931] keyspan 9-1:1.0: Keyspan 4 port adapter converter detected [ 2130.208231][T18931] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 81 [ 2130.208318][T18931] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 88 [ 2130.256145][T18931] usb 9-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 2130.275375][T18931] usb 9-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 2130.289020][ T2925] bridge_slave_1: left allmulticast mode [ 2130.289063][ T2925] bridge_slave_1: left promiscuous mode [ 2130.289357][ T2925] bridge0: port 2(bridge_slave_1) entered disabled state [ 2130.309856][T18931] usb 9-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 2130.329357][T18931] usb 9-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 2130.450601][T18931] usb 9-1: USB disconnect, device number 21 [ 2130.468839][ T2925] bridge_slave_0: left allmulticast mode [ 2130.468876][ T2925] bridge_slave_0: left promiscuous mode [ 2130.469194][ T2925] bridge0: port 1(bridge_slave_0) entered disabled state [ 2130.503924][T18931] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 2130.523121][T18931] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 2130.544965][T18931] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 2130.561856][T18931] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 2130.563408][T18931] keyspan 9-1:1.0: device disconnected [ 2130.831248][ T2925] bridge_slave_1: left allmulticast mode [ 2130.831294][ T2925] bridge_slave_1: left promiscuous mode [ 2130.831579][ T2925] bridge0: port 2(bridge_slave_1) entered disabled state [ 2131.005642][ T2925] bridge_slave_0: left allmulticast mode [ 2131.005673][ T2925] bridge_slave_0: left promiscuous mode [ 2131.005838][ T2925] bridge0: port 1(bridge_slave_0) entered disabled state [ 2131.327622][ T2925] bridge_slave_1: left allmulticast mode [ 2131.327701][ T2925] bridge_slave_1: left promiscuous mode [ 2131.328241][ T2925] bridge0: port 2(bridge_slave_1) entered disabled state [ 2131.437976][ T2925] bridge_slave_0: left allmulticast mode [ 2131.438053][ T2925] bridge_slave_0: left promiscuous mode [ 2131.438794][ T2925] bridge0: port 1(bridge_slave_0) entered disabled state [ 2131.798902][T19215] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2964'. [ 2131.991861][ T2925] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2132.081615][ T2925] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2132.147587][ T2925] bond0 (unregistering): Released all slaves [ 2132.421334][ T2925] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2132.522805][ T2925] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2132.589477][ T2925] bond0 (unregistering): Released all slaves [ 2132.891646][ T2925] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2132.994747][ T2925] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2133.083867][ T2925] bond0 (unregistering): Released all slaves [ 2133.194346][T16315] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2133.208331][T16315] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2133.261644][T16315] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2133.261793][T14182] usb 9-1: new full-speed USB device number 22 using dummy_hcd [ 2133.414066][ T5260] 8021q: adding VLAN 0 to HW filter on device eth2 [ 2133.415285][T16315] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2133.529862][T16315] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2134.155466][T14182] usb 9-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 2134.158953][T14182] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 2134.158997][T14182] usb 9-1: can't read configurations, error -71 [ 2135.858837][T16315] Bluetooth: hci2: command tx timeout [ 2136.051337][ T2925] hsr_slave_0: left promiscuous mode [ 2136.181016][ T2925] hsr_slave_1: left promiscuous mode [ 2136.184791][ T2925] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2136.260795][ T2925] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2136.420791][ T2925] hsr_slave_0: left promiscuous mode [ 2136.460840][ T2925] hsr_slave_1: left promiscuous mode [ 2136.463445][ T2925] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2136.495647][ T2925] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2136.700952][ T2925] hsr_slave_0: left promiscuous mode [ 2136.727820][ T2925] hsr_slave_1: left promiscuous mode [ 2136.729266][ T2925] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2136.851617][ T2925] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2137.440584][T18931] usb 9-1: new full-speed USB device number 24 using dummy_hcd [ 2137.471434][ T2925] team0 (unregistering): Port device team_slave_1 removed [ 2137.514285][ T2925] team0 (unregistering): Port device team_slave_0 removed [ 2137.950623][T16315] Bluetooth: hci2: command tx timeout [ 2138.352660][ T2925] team0 (unregistering): Port device team_slave_1 removed [ 2138.412264][ T2925] team0 (unregistering): Port device team_slave_0 removed [ 2138.686522][T18931] usb 9-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 2138.693601][T18931] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 2138.693644][T18931] usb 9-1: can't read configurations, error -71 [ 2139.151685][ T2925] team0 (unregistering): Port device team_slave_1 removed [ 2139.201508][ T2925] team0 (unregistering): Port device team_slave_0 removed [ 2139.872843][T18931] usb 9-1: new full-speed USB device number 26 using dummy_hcd [ 2140.034879][T16315] Bluetooth: hci2: command tx timeout [ 2140.039396][T18931] usb 9-1: not running at top speed; connect to a high speed hub [ 2140.039443][T18931] usb 9-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 2140.089530][T18931] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2140.089596][T18931] usb 9-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 6 [ 2140.104219][T18931] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2140.104250][T18931] usb 9-1: Product: syz [ 2140.104266][T18931] usb 9-1: Manufacturer: syz [ 2140.104280][T18931] usb 9-1: SerialNumber: syz [ 2140.207866][T18931] keyspan 9-1:1.0: Keyspan 4 port adapter converter detected [ 2140.208458][T18931] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 81 [ 2140.208504][T18931] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 88 [ 2140.243495][T18931] usb 9-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 2140.319074][T18931] usb 9-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 2140.414995][T18931] usb 9-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 2140.453435][T18931] usb 9-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 2140.573738][T18931] usb 9-1: USB disconnect, device number 26 [ 2140.726318][T18931] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 2140.736524][T18931] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 2140.751810][T18931] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 2140.919958][T18931] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 2140.948782][T18931] keyspan 9-1:1.0: device disconnected [ 2142.110840][T16315] Bluetooth: hci2: command tx timeout [ 2145.293636][ T5260] 8021q: adding VLAN 0 to HW filter on device eth3 [ 2145.409366][T18947] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2149.384146][T19292] FAULT_INJECTION: forcing a failure. [ 2149.384146][T19292] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2149.384190][T19292] CPU: 0 UID: 0 PID: 19292 Comm: syz.8.2975 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2149.384221][T19292] Tainted: [L]=SOFTLOCKUP [ 2149.384230][T19292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2149.384244][T19292] Call Trace: [ 2149.384254][T19292] [ 2149.384266][T19292] dump_stack_lvl+0xe8/0x150 [ 2149.384309][T19292] should_fail_ex+0x46b/0x600 [ 2149.384343][T19292] _copy_from_iter+0x1d3/0x1660 [ 2149.384376][T19292] ? __lock_acquire+0x747/0x2de0 [ 2149.384412][T19292] ? lock_acquire+0x115/0x350 [ 2149.384439][T19292] ? __pfx__copy_from_iter+0x10/0x10 [ 2149.384470][T19292] ? lock_acquire+0x115/0x350 [ 2149.384509][T19292] copy_page_from_iter+0x219/0x2d0 [ 2149.384542][T19292] tun_get_user+0x1c16/0x44e0 [ 2149.384689][T19292] ? is_bpf_text_address+0x292/0x2b0 [ 2149.384726][T19292] ? tun_get_user+0x70a/0x44e0 [ 2149.384784][T19292] ? __lock_acquire+0x747/0x2de0 [ 2149.384821][T19292] ? __pfx_tun_get_user+0x10/0x10 [ 2149.384858][T19292] ? __lock_acquire+0x747/0x2de0 [ 2149.384896][T19292] ? ref_tracker_alloc+0x353/0x4c0 [ 2149.384926][T19292] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 2149.384959][T19292] ? lock_acquire+0x115/0x350 [ 2149.384985][T19292] ? tun_get+0x1c/0x2f0 [ 2149.385017][T19292] ? tun_get+0x1c/0x2f0 [ 2149.385044][T19292] ? tun_get+0x1c/0x2f0 [ 2149.385072][T19292] tun_chr_write_iter+0x119/0x200 [ 2149.385100][T19292] vfs_write+0x61e/0xbb0 [ 2149.385136][T19292] ? __pfx_vfs_write+0x10/0x10 [ 2149.385171][T19292] ? __fget_files+0x2a/0x420 [ 2149.385204][T19292] ksys_write+0x156/0x270 [ 2149.385231][T19292] ? __pfx_ksys_write+0x10/0x10 [ 2149.385268][T19292] do_syscall_64+0x166/0x520 [ 2149.385291][T19292] ? trace_irq_disable+0x3b/0x140 [ 2149.385317][T19292] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2149.385341][T19292] ? clear_bhb_loop+0x70/0xc0 [ 2149.385368][T19292] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2149.385397][T19292] RIP: 0033:0x7f93b266e98e [ 2149.385425][T19292] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2149.385444][T19292] RSP: 002b:00007f93b0905fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2149.385469][T19292] RAX: ffffffffffffffda RBX: 00007f93b09066c0 RCX: 00007f93b266e98e [ 2149.385487][T19292] RDX: 000000000000009e RSI: 0000200000000180 RDI: 00000000000000c8 [ 2149.385501][T19292] RBP: 00007f93b0906090 R08: 0000000000000000 R09: 0000000000000000 [ 2149.385516][T19292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2149.385530][T19292] R13: 00007f93b2936038 R14: 00007f93b2935fa0 R15: 00007ffd1d1d9288 [ 2149.385566][T19292] [ 2149.891560][T19039] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2149.929818][T14182] usb 9-1: new full-speed USB device number 27 using dummy_hcd [ 2149.993855][T19039] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2150.047203][T19039] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2150.080331][T19039] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2150.082170][T19039] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2150.880808][T14182] usb 9-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 2150.882107][T14182] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 2150.882146][T14182] usb 9-1: can't read configurations, error -71 [ 2151.834788][T19220] bridge0: port 1(bridge_slave_0) entered blocking state [ 2151.834875][T19220] bridge0: port 1(bridge_slave_0) entered disabled state [ 2151.834989][T19220] bridge_slave_0: entered allmulticast mode [ 2151.862577][T19220] bridge_slave_0: entered promiscuous mode [ 2151.908715][T19220] bridge0: port 2(bridge_slave_1) entered blocking state [ 2151.908794][T19220] bridge0: port 2(bridge_slave_1) entered disabled state [ 2151.909092][T19220] bridge_slave_1: entered allmulticast mode [ 2151.914252][T19220] bridge_slave_1: entered promiscuous mode [ 2152.807679][T19322] FAULT_INJECTION: forcing a failure. [ 2152.807679][T19322] name failslab, interval 1, probability 1, space 0, times 0 [ 2152.807724][T19322] CPU: 0 UID: 0 PID: 19322 Comm: syz.8.2979 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2152.807755][T19322] Tainted: [L]=SOFTLOCKUP [ 2152.807764][T19322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2152.807778][T19322] Call Trace: [ 2152.807787][T19322] [ 2152.807799][T19322] dump_stack_lvl+0xe8/0x150 [ 2152.807839][T19322] should_fail_ex+0x46b/0x600 [ 2152.807876][T19322] should_failslab+0xa8/0x100 [ 2152.807913][T19322] __kmalloc_noprof+0xfb/0x790 [ 2152.807944][T19322] ? kernfs_fop_write_iter+0x158/0x540 [ 2152.808015][T19322] ? kernfs_fop_write_iter+0x158/0x540 [ 2152.808061][T19322] kernfs_fop_write_iter+0x158/0x540 [ 2152.808101][T19322] vfs_write+0x61e/0xbb0 [ 2152.808138][T19322] ? __pfx_vfs_write+0x10/0x10 [ 2152.808168][T19322] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 2152.808210][T19322] ? mutex_lock_nested+0x152/0x1d0 [ 2152.808236][T19322] ? fdget_pos+0x252/0x320 [ 2152.808270][T19322] ksys_write+0x156/0x270 [ 2152.808332][T19322] ? __pfx_ksys_write+0x10/0x10 [ 2152.808371][T19322] do_syscall_64+0x166/0x520 [ 2152.808391][T19322] ? trace_irq_disable+0x3b/0x140 [ 2152.808419][T19322] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2152.808442][T19322] ? clear_bhb_loop+0x70/0xc0 [ 2152.808469][T19322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2152.808490][T19322] RIP: 0033:0x7f93b26ae159 [ 2152.808512][T19322] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2152.808531][T19322] RSP: 002b:00007f93b0906028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2152.808556][T19322] RAX: ffffffffffffffda RBX: 00007f93b2935fa0 RCX: 00007f93b26ae159 [ 2152.808571][T19322] RDX: 0000000000000003 RSI: 0000200000000200 RDI: 0000000000000003 [ 2152.808583][T19322] RBP: 00007f93b0906090 R08: 0000000000000000 R09: 0000000000000000 [ 2152.808596][T19322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2152.808609][T19322] R13: 00007f93b2936038 R14: 00007f93b2935fa0 R15: 00007ffd1d1d9288 [ 2152.808644][T19322] [ 2152.916567][T19039] Bluetooth: hci3: command tx timeout [ 2153.616194][T19220] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2153.643120][T19220] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2154.740326][T19220] team0: Port device team_slave_0 added [ 2154.849326][T19220] team0: Port device team_slave_1 added [ 2155.000336][T19039] Bluetooth: hci3: command tx timeout [ 2155.160469][T19220] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2155.160491][T19220] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2155.160520][T19220] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2155.164278][T19220] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2155.164298][T19220] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2155.164327][T19220] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2156.959824][T19220] hsr_slave_0: entered promiscuous mode [ 2156.966708][T19220] hsr_slave_1: entered promiscuous mode [ 2157.080308][T19039] Bluetooth: hci3: command tx timeout [ 2158.470920][T18932] usb 9-1: new high-speed USB device number 29 using dummy_hcd [ 2158.472126][T16315] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2158.542015][T16315] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2158.544245][T16315] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2158.554588][T16315] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2158.571414][T16315] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2158.622838][T18932] usb 9-1: New USB device found, idVendor=0bda, idProduct=4014, bcdDevice= 0.40 [ 2158.635953][T18932] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2158.635987][T18932] usb 9-1: Product: syz [ 2158.636004][T18932] usb 9-1: Manufacturer: syz [ 2158.636020][T18932] usb 9-1: SerialNumber: syz [ 2159.150331][T19039] Bluetooth: hci3: command tx timeout [ 2159.435180][T19389] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2159.435856][T19389] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2159.487417][T19389] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2159.488098][T19389] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2159.514794][T18932] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 2159.514856][T18932] usb 9-1: MIDIStreaming interface descriptor not found [ 2159.707680][T18932] usb 9-1: USB disconnect, device number 29 [ 2160.071843][T19412] udevd[19412]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2160.604641][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 2160.688208][T19426] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 2160.688248][T19426] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 2160.910456][T19039] Bluetooth: hci5: command tx timeout [ 2161.430374][T19333] usb 9-1: new full-speed USB device number 30 using dummy_hcd [ 2162.097295][T19333] usb 9-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 2162.098781][T19333] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 2162.098827][T19333] usb 9-1: can't read configurations, error -71 [ 2162.574758][T19296] bridge0: port 1(bridge_slave_0) entered blocking state [ 2162.575004][T19296] bridge0: port 1(bridge_slave_0) entered disabled state [ 2162.575205][T19296] bridge_slave_0: entered allmulticast mode [ 2162.579537][T19296] bridge_slave_0: entered promiscuous mode [ 2162.641505][T19296] bridge0: port 2(bridge_slave_1) entered blocking state [ 2162.641678][T19296] bridge0: port 2(bridge_slave_1) entered disabled state [ 2162.641946][T19296] bridge_slave_1: entered allmulticast mode [ 2162.645054][T19296] bridge_slave_1: entered promiscuous mode [ 2162.990219][T19039] Bluetooth: hci5: command tx timeout [ 2164.954893][T19296] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2165.071518][T19039] Bluetooth: hci5: command tx timeout [ 2165.079348][T19296] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2165.348198][T19036] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2165.353427][T19445] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2165.500713][T19036] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2165.529120][T19448] FAULT_INJECTION: forcing a failure. [ 2165.529120][T19448] name failslab, interval 1, probability 1, space 0, times 0 [ 2165.529163][T19448] CPU: 1 UID: 0 PID: 19448 Comm: syz.8.2991 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2165.529194][T19448] Tainted: [L]=SOFTLOCKUP [ 2165.529203][T19448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2165.529216][T19448] Call Trace: [ 2165.529226][T19448] [ 2165.529237][T19448] dump_stack_lvl+0xe8/0x150 [ 2165.529275][T19448] should_fail_ex+0x46b/0x600 [ 2165.529312][T19448] should_failslab+0xa8/0x100 [ 2165.529345][T19448] ? do_getname+0x2e/0x250 [ 2165.529377][T19448] kmem_cache_alloc_noprof+0x9e/0x690 [ 2165.529403][T19448] ? do_getname+0x2e/0x250 [ 2165.529439][T19448] do_getname+0x2e/0x250 [ 2165.529466][T19448] ? __se_sys_mkdir+0x15/0x150 [ 2165.529498][T19448] __se_sys_mkdir+0x21/0x150 [ 2165.529532][T19448] do_syscall_64+0x166/0x520 [ 2165.529553][T19448] ? trace_irq_disable+0x3b/0x140 [ 2165.529581][T19448] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2165.529603][T19448] ? clear_bhb_loop+0x70/0xc0 [ 2165.529630][T19448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2165.529652][T19448] RIP: 0033:0x7f93b26ae159 [ 2165.529673][T19448] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2165.529691][T19448] RSP: 002b:00007f93b0906028 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 2165.529715][T19448] RAX: ffffffffffffffda RBX: 00007f93b2935fa0 RCX: 00007f93b26ae159 [ 2165.529732][T19448] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000200000000000 [ 2165.529748][T19448] RBP: 00007f93b0906090 R08: 0000000000000000 R09: 0000000000000000 [ 2165.529763][T19448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2165.529777][T19448] R13: 00007f93b2936038 R14: 00007f93b2935fa0 R15: 00007ffd1d1d9288 [ 2165.529812][T19448] [ 2165.808003][T19452] FAULT_INJECTION: forcing a failure. [ 2165.808003][T19452] name fail_futex, interval 1, probability 0, space 0, times 0 [ 2165.808052][T19452] CPU: 0 UID: 0 PID: 19452 Comm: syz.8.2993 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2165.808089][T19452] Tainted: [L]=SOFTLOCKUP [ 2165.808099][T19452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2165.808114][T19452] Call Trace: [ 2165.808124][T19452] [ 2165.808136][T19452] dump_stack_lvl+0xe8/0x150 [ 2165.808179][T19452] should_fail_ex+0x46b/0x600 [ 2165.808219][T19452] get_futex_key+0x1b4/0x1580 [ 2165.808258][T19452] ? __lock_acquire+0x747/0x2de0 [ 2165.808294][T19452] ? __pfx_get_futex_key+0x10/0x10 [ 2165.808324][T19452] ? rcu_is_watching+0x16/0xb0 [ 2165.808338][T19036] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2165.808370][T19452] futex_wait_setup+0x4a/0x590 [ 2165.808404][T19452] ? __futex_wait+0xe1/0x410 [ 2165.808437][T19452] __futex_wait+0x161/0x410 [ 2165.808474][T19452] ? __pfx___futex_wait+0x10/0x10 [ 2165.808509][T19452] ? __pfx_futex_wake_mark+0x10/0x10 [ 2165.808557][T19452] ? try_to_wake_up+0x84b/0x1430 [ 2165.808603][T19452] futex_wait+0x121/0x390 [ 2165.808638][T19452] ? __pfx_futex_wait+0x10/0x10 [ 2165.808690][T19452] do_futex+0x3e7/0x4e0 [ 2165.808721][T19452] ? __pfx_do_futex+0x10/0x10 [ 2165.808747][T19452] ? put_timespec64+0xd8/0x130 [ 2165.808789][T19452] __se_sys_futex+0x3a8/0x450 [ 2165.808820][T19452] ? __x64_sys_clock_gettime+0x238/0x290 [ 2165.808848][T19452] ? __pfx___se_sys_futex+0x10/0x10 [ 2165.808874][T19452] ? __pfx___x64_sys_clock_gettime+0x10/0x10 [ 2165.808908][T19452] ? __x64_sys_futex+0x21/0xf0 [ 2165.808936][T19452] do_syscall_64+0x166/0x520 [ 2165.808959][T19452] ? trace_irq_disable+0x3b/0x140 [ 2165.808991][T19452] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2165.809015][T19452] ? clear_bhb_loop+0x70/0xc0 [ 2165.809042][T19452] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2165.809066][T19452] RIP: 0033:0x7f93b26ae159 [ 2165.809090][T19452] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2165.809112][T19452] RSP: 002b:00007f93b09060e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 2165.809141][T19452] RAX: ffffffffffffffda RBX: 00007f93b2935fa8 RCX: 00007f93b26ae159 [ 2165.809161][T19452] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f93b2935fa8 [ 2165.809177][T19452] RBP: 00007f93b2935fa0 R08: 0000000000000000 R09: 0000000000000000 [ 2165.809193][T19452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2165.809208][T19452] R13: 00007f93b2936038 R14: 00007ffd1d1d91a0 R15: 00007ffd1d1d9288 [ 2165.809241][T19452] [ 2165.846308][T19036] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2165.883296][T19296] team0: Port device team_slave_0 added [ 2165.925323][T19036] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2165.948022][T19036] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2166.567317][T19296] team0: Port device team_slave_1 added [ 2166.586275][T19036] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2166.623371][T19036] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2166.996652][T19296] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2166.996675][T19296] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2166.996749][T19296] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2167.063784][T19296] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2167.063805][T19296] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2167.063832][T19296] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2167.150903][T19039] Bluetooth: hci5: command tx timeout [ 2167.676687][T19469] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2167.921268][T19296] hsr_slave_0: entered promiscuous mode [ 2167.922263][T19296] hsr_slave_1: entered promiscuous mode [ 2167.922876][T19296] debugfs: 'hsr0' already exists in 'hsr' [ 2167.922902][T19296] Cannot create hsr debugfs directory [ 2168.084171][T19472] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2168.818965][T19486] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2169.535666][ T5260] 8021q: adding VLAN 0 to HW filter on device eth1 [ 2169.536287][T19396] bridge0: port 1(bridge_slave_0) entered blocking state [ 2169.536641][T19396] bridge0: port 1(bridge_slave_0) entered disabled state [ 2169.536837][T19396] bridge_slave_0: entered allmulticast mode [ 2169.583771][T19396] bridge_slave_0: entered promiscuous mode [ 2169.618408][T19396] bridge0: port 2(bridge_slave_1) entered blocking state [ 2169.618526][T19396] bridge0: port 2(bridge_slave_1) entered disabled state [ 2169.618641][T19396] bridge_slave_1: entered allmulticast mode [ 2169.642016][T19396] bridge_slave_1: entered promiscuous mode [ 2169.853845][T19396] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2169.943725][T19396] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2170.074463][T19396] team0: Port device team_slave_0 added [ 2170.078168][T19396] team0: Port device team_slave_1 added [ 2170.120386][ T5738] usb 9-1: new high-speed USB device number 32 using dummy_hcd [ 2170.246306][T19396] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2170.246326][T19396] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2170.246343][T19396] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2170.300153][ T5738] usb 9-1: device descriptor read/64, error -71 [ 2170.333603][T19396] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2170.333625][T19396] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2170.333654][T19396] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2170.580336][ T5738] usb 9-1: new high-speed USB device number 33 using dummy_hcd [ 2170.640536][ T2925] bridge_slave_1: left allmulticast mode [ 2170.640578][ T2925] bridge_slave_1: left promiscuous mode [ 2170.641062][ T2925] bridge0: port 2(bridge_slave_1) entered disabled state [ 2170.710129][ T5738] usb 9-1: device descriptor read/64, error -71 [ 2170.741401][ T2925] bridge_slave_0: left allmulticast mode [ 2170.741431][ T2925] bridge_slave_0: left promiscuous mode [ 2170.741691][ T2925] bridge0: port 1(bridge_slave_0) entered disabled state [ 2170.827401][ T5738] usb usb9-port1: attempt power cycle [ 2170.970494][ T2925] bridge_slave_1: left allmulticast mode [ 2170.970526][ T2925] bridge_slave_1: left promiscuous mode [ 2170.970705][ T2925] bridge0: port 2(bridge_slave_1) entered disabled state [ 2171.081059][ T2925] bridge_slave_0: left allmulticast mode [ 2171.081089][ T2925] bridge_slave_0: left promiscuous mode [ 2171.081266][ T2925] bridge0: port 1(bridge_slave_0) entered disabled state [ 2171.160170][ T5738] usb 9-1: new high-speed USB device number 34 using dummy_hcd [ 2171.191230][ T5738] usb 9-1: device descriptor read/8, error -71 [ 2171.482423][ T5738] usb 9-1: new high-speed USB device number 35 using dummy_hcd [ 2171.512423][ T5738] usb 9-1: device descriptor read/8, error -71 [ 2171.622193][ T5738] usb usb9-port1: unable to enumerate USB device [ 2172.120817][ T2925] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2172.201570][ T2925] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2172.243356][ T2925] bond0 (unregistering): Released all slaves [ 2172.962470][ T2925] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2173.041236][ T2925] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2173.062173][ T2925] bond0 (unregistering): Released all slaves [ 2174.325912][T16315] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2174.344178][T16315] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2174.347138][T16315] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2174.369069][T16315] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2174.508487][T16315] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2175.175195][T19520] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2175.377795][T19396] hsr_slave_0: entered promiscuous mode [ 2175.378884][T19396] hsr_slave_1: entered promiscuous mode [ 2175.379493][T19396] debugfs: 'hsr0' already exists in 'hsr' [ 2175.379520][T19396] Cannot create hsr debugfs directory [ 2175.583296][ T2925] hsr_slave_0: left promiscuous mode [ 2175.620520][ T2925] hsr_slave_1: left promiscuous mode [ 2175.621681][ T2925] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2175.661357][ T2925] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2175.820226][ T2925] hsr_slave_0: left promiscuous mode [ 2175.840134][ T2925] hsr_slave_1: left promiscuous mode [ 2175.841455][ T2925] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2175.882162][ T2925] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2176.670172][T19039] Bluetooth: hci1: command tx timeout [ 2176.850852][ T2925] team0 (unregistering): Port device team_slave_1 removed [ 2176.911235][ T2925] team0 (unregistering): Port device team_slave_0 removed [ 2177.430992][ T2925] team0 (unregistering): Port device team_slave_1 removed [ 2177.491790][ T2925] team0 (unregistering): Port device team_slave_0 removed [ 2178.750039][T19039] Bluetooth: hci1: command tx timeout [ 2179.325580][T19550] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2180.830053][T19039] Bluetooth: hci1: command tx timeout [ 2182.796333][ T5260] 8021q: adding VLAN 0 to HW filter on device eth2 [ 2182.972393][T19039] Bluetooth: hci1: command tx timeout [ 2184.776347][T19511] bridge0: port 1(bridge_slave_0) entered blocking state [ 2184.776588][T19511] bridge0: port 1(bridge_slave_0) entered disabled state [ 2184.776808][T19511] bridge_slave_0: entered allmulticast mode [ 2184.812002][T19511] bridge_slave_0: entered promiscuous mode [ 2184.844951][T19511] bridge0: port 2(bridge_slave_1) entered blocking state [ 2184.845169][T19511] bridge0: port 2(bridge_slave_1) entered disabled state [ 2184.845407][T19511] bridge_slave_1: entered allmulticast mode [ 2184.848537][T19511] bridge_slave_1: entered promiscuous mode [ 2184.963862][T19511] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2184.984304][T19511] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2185.905760][T19511] team0: Port device team_slave_0 added [ 2185.923211][T19511] team0: Port device team_slave_1 added [ 2186.692234][T19511] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2186.692259][T19511] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2186.692275][T19511] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2186.696788][T19511] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2186.696802][T19511] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2186.696819][T19511] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2186.859834][T19333] usb 9-1: new full-speed USB device number 36 using dummy_hcd [ 2187.013624][T19333] usb 9-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 2187.016888][T19333] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2187.016927][T19333] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2187.016952][T19333] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2187.016998][T19333] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2187.076619][T19333] usb 9-1: config 0 descriptor?? [ 2187.564354][T19608] loop2: detected capacity change from 0 to 7 [ 2187.725947][T19608] Dev loop2: unable to read RDB block 7 [ 2187.725992][T19608] loop2: AHDI p1 p2 p3 [ 2187.726024][T19608] loop2: partition table partially beyond EOD, truncated [ 2187.726364][T19608] loop2: p1 start 1601398130 is beyond EOD, truncated [ 2187.726388][T19608] loop2: p2 start 1702059890 is beyond EOD, truncated [ 2187.826332][T19511] hsr_slave_0: entered promiscuous mode [ 2187.852540][T19511] hsr_slave_1: entered promiscuous mode [ 2187.853656][T19511] debugfs: 'hsr0' already exists in 'hsr' [ 2187.853687][T19511] Cannot create hsr debugfs directory [ 2187.970862][T19333] hid-multitouch 0003:0457:07DA.000A: unknown main item tag 0x0 [ 2187.970905][T19333] hid-multitouch 0003:0457:07DA.000A: unknown main item tag 0x0 [ 2187.970933][T19333] hid-multitouch 0003:0457:07DA.000A: unknown main item tag 0x0 [ 2187.970960][T19333] hid-multitouch 0003:0457:07DA.000A: unknown main item tag 0x0 [ 2187.970987][T19333] hid-multitouch 0003:0457:07DA.000A: unknown main item tag 0x0 [ 2187.971015][T19333] hid-multitouch 0003:0457:07DA.000A: unknown main item tag 0x0 [ 2187.971042][T19333] hid-multitouch 0003:0457:07DA.000A: unknown main item tag 0x0 [ 2187.971068][T19333] hid-multitouch 0003:0457:07DA.000A: unknown main item tag 0x0 [ 2187.971095][T19333] hid-multitouch 0003:0457:07DA.000A: unknown main item tag 0x0 [ 2187.971122][T19333] hid-multitouch 0003:0457:07DA.000A: unknown main item tag 0x0 [ 2188.087107][T19333] hid-multitouch 0003:0457:07DA.000A: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.8-1/input0 [ 2189.714364][T18932] usb 9-1: USB disconnect, device number 36 [ 2191.759844][T16291] usb 9-1: new high-speed USB device number 37 using dummy_hcd [ 2191.913524][T16291] usb 9-1: Using ep0 maxpacket: 8 [ 2191.914937][T16291] usb 9-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 2191.916905][T16291] usb 9-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2191.916939][T16291] usb 9-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 1040, setting to 1024 [ 2191.916970][T16291] usb 9-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2191.917000][T16291] usb 9-1: config 0 interface 0 has no altsetting 0 [ 2191.917037][T16291] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2191.994877][T16291] usb 9-1: config 0 descriptor?? [ 2192.018127][T19637] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 2192.448465][T16291] usbhid 9-1:0.0: can't add hid device: -71 [ 2192.448632][T16291] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 2192.524633][T16291] usb 9-1: USB disconnect, device number 37 [ 2194.251455][T16291] usb 9-1: new full-speed USB device number 38 using dummy_hcd [ 2194.401171][T16291] usb 9-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 2194.403238][T16291] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2194.403276][T16291] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2194.403302][T16291] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2194.403349][T16291] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2194.492105][T16291] usb 9-1: config 0 descriptor?? [ 2195.067158][T16315] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2195.174677][T16291] hid_parser_main: 24 callbacks suppressed [ 2195.174793][T16291] hid-multitouch 0003:0457:07DA.000B: unknown main item tag 0x0 [ 2195.174829][T16291] hid-multitouch 0003:0457:07DA.000B: unknown main item tag 0x0 [ 2195.174858][T16291] hid-multitouch 0003:0457:07DA.000B: unknown main item tag 0x0 [ 2195.174886][T16291] hid-multitouch 0003:0457:07DA.000B: unknown main item tag 0x0 [ 2195.174913][T16291] hid-multitouch 0003:0457:07DA.000B: unknown main item tag 0x0 [ 2195.174941][T16291] hid-multitouch 0003:0457:07DA.000B: unknown main item tag 0x0 [ 2195.174968][T16291] hid-multitouch 0003:0457:07DA.000B: unknown main item tag 0x0 [ 2195.174995][T16291] hid-multitouch 0003:0457:07DA.000B: unknown main item tag 0x0 [ 2195.175022][T16291] hid-multitouch 0003:0457:07DA.000B: unknown main item tag 0x0 [ 2195.175049][T16291] hid-multitouch 0003:0457:07DA.000B: unknown main item tag 0x0 [ 2195.279131][T16315] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2195.299978][T19651] FAULT_INJECTION: forcing a failure. [ 2195.299978][T19651] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2195.300016][T19651] CPU: 0 UID: 0 PID: 19651 Comm: syz.8.3022 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2195.300047][T19651] Tainted: [L]=SOFTLOCKUP [ 2195.300055][T19651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2195.300069][T19651] Call Trace: [ 2195.300079][T19651] [ 2195.300090][T19651] dump_stack_lvl+0xe8/0x150 [ 2195.300133][T19651] should_fail_ex+0x46b/0x600 [ 2195.300168][T19651] strncpy_from_user+0x36/0x2c0 [ 2195.300197][T19651] do_getname+0x77/0x250 [ 2195.300234][T19651] do_sys_openat2+0xcc/0x200 [ 2195.300269][T19651] ? __pfx_do_sys_openat2+0x10/0x10 [ 2195.300303][T19651] ? ksys_write+0x248/0x270 [ 2195.300330][T19651] ? __pfx_ksys_write+0x10/0x10 [ 2195.300361][T19651] __x64_sys_openat+0x138/0x170 [ 2195.300399][T19651] do_syscall_64+0x166/0x520 [ 2195.300419][T19651] ? trace_irq_disable+0x3b/0x140 [ 2195.300447][T19651] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2195.300470][T19651] ? clear_bhb_loop+0x70/0xc0 [ 2195.300496][T19651] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2195.300518][T19651] RIP: 0033:0x7f93b266e98e [ 2195.300544][T19651] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2195.300564][T19651] RSP: 002b:00007f93b0905b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2195.300590][T19651] RAX: ffffffffffffffda RBX: 00007f93b09066c0 RCX: 00007f93b266e98e [ 2195.300605][T19651] RDX: 000000000014e000 RSI: 00007f93b0905c00 RDI: ffffffffffffff9c [ 2195.300621][T19651] RBP: 00007f93b0905c00 R08: 0000000000000000 R09: 0000000000000000 [ 2195.300636][T19651] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 2195.300651][T19651] R13: 00007f93b2936038 R14: 00007f93b2935fa0 R15: 00007ffd1d1d9288 [ 2195.300704][T19651] [ 2195.301752][T16315] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2195.365585][T16315] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2195.377637][T16315] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2195.878267][T16291] hid-multitouch 0003:0457:07DA.000B: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.8-1/input0 [ 2195.905277][T16291] usb 9-1: USB disconnect, device number 38 [ 2196.306665][T19657] fido_id[19657]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 2197.872076][T19039] Bluetooth: hci0: command tx timeout [ 2199.779761][T18932] usb 9-1: new full-speed USB device number 39 using dummy_hcd [ 2199.949736][T19039] Bluetooth: hci0: command tx timeout [ 2200.153266][T18932] usb 9-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 2200.154580][T18932] usb 9-1: config 1 has an invalid descriptor of length 67, skipping remainder of the config [ 2200.154655][T18932] usb 9-1: config 1 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 21248, setting to 64 [ 2200.154673][T18932] usb 9-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 2200.157172][T18932] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2200.157200][T18932] usb 9-1: Product: syz [ 2200.157215][T18932] usb 9-1: Manufacturer: syz [ 2200.157227][T18932] usb 9-1: SerialNumber: syz [ 2200.290449][ T2925] bridge_slave_1: left allmulticast mode [ 2200.290480][ T2925] bridge_slave_1: left promiscuous mode [ 2200.373604][ T2925] bridge0: port 2(bridge_slave_1) entered disabled state [ 2200.423455][T19695] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 2200.427417][T18932] snd-usb-caiaq 9-1:1.0: invalid EPs [ 2200.427435][T18932] usb 9-1: unable to init card! (ret=-22) [ 2200.427962][T18932] snd-usb-caiaq 9-1:1.0: probe with driver snd-usb-caiaq failed with error -22 [ 2201.924562][T19333] usb 9-1: USB disconnect, device number 39 [ 2202.031914][T19039] Bluetooth: hci0: command tx timeout [ 2202.417794][ T2925] bridge_slave_0: left allmulticast mode [ 2202.417841][ T2925] bridge_slave_0: left promiscuous mode [ 2202.418130][ T2925] bridge0: port 1(bridge_slave_0) entered disabled state [ 2204.109815][T16315] Bluetooth: hci0: command tx timeout [ 2205.235556][T19705] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2206.258576][ T2925] bridge_slave_1: left allmulticast mode [ 2206.258623][ T2925] bridge_slave_1: left promiscuous mode [ 2206.258911][ T2925] bridge0: port 2(bridge_slave_1) entered disabled state [ 2206.847505][ T2925] bridge_slave_0: left allmulticast mode [ 2206.847553][ T2925] bridge_slave_0: left promiscuous mode [ 2206.847840][ T2925] bridge0: port 1(bridge_slave_0) entered disabled state [ 2209.384297][ T2925] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2209.578803][ T2925] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2210.365713][ T2925] bond0 (unregistering): Released all slaves [ 2210.691139][T16315] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 2210.798000][T16315] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 2210.831023][T16315] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 2210.845544][T16315] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 2210.849144][T16315] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 2212.926331][ T2925] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2213.079688][T19039] Bluetooth: hci6: command tx timeout [ 2213.782715][ T2925] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2214.426167][ T2925] bond0 (unregistering): Released all slaves [ 2215.178577][T19039] Bluetooth: hci6: command tx timeout [ 2215.959530][T16292] usb 9-1: new high-speed USB device number 40 using dummy_hcd [ 2216.147379][T16292] usb 9-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 2216.163797][T16292] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 4 [ 2216.163874][T16292] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2216.224874][T16292] usb 9-1: config 0 descriptor?? [ 2216.350406][T16292] ums-realtek 9-1:0.0: USB Mass Storage device detected [ 2217.229516][T19039] Bluetooth: hci6: command tx timeout [ 2219.309409][T19039] Bluetooth: hci6: command tx timeout [ 2220.311704][T16315] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2220.418603][T16315] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2220.654602][T16315] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2220.708087][T16315] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2220.729646][T16315] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2221.809065][ T5260] 8021q: adding VLAN 0 to HW filter on device eth1 [ 2222.043181][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 2222.989376][T16315] Bluetooth: hci2: command tx timeout [ 2224.436896][T19653] bridge0: port 1(bridge_slave_0) entered blocking state [ 2224.437044][T19653] bridge0: port 1(bridge_slave_0) entered disabled state [ 2224.437269][T19653] bridge_slave_0: entered allmulticast mode [ 2224.463016][T19653] bridge_slave_0: entered promiscuous mode [ 2225.079349][T16315] Bluetooth: hci2: command tx timeout [ 2225.555889][T19653] bridge0: port 2(bridge_slave_1) entered blocking state [ 2225.556196][T19653] bridge0: port 2(bridge_slave_1) entered disabled state [ 2225.556837][T19653] bridge_slave_1: entered allmulticast mode [ 2225.608623][T19653] bridge_slave_1: entered promiscuous mode [ 2225.714133][ T5260] 8021q: adding VLAN 0 to HW filter on device eth2 [ 2225.957561][T19717] bridge0: port 1(bridge_slave_0) entered blocking state [ 2225.967050][T19717] bridge0: port 1(bridge_slave_0) entered disabled state [ 2225.967305][T19717] bridge_slave_0: entered allmulticast mode [ 2225.989182][T19717] bridge_slave_0: entered promiscuous mode [ 2226.047463][T19653] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2226.059600][T19717] bridge0: port 2(bridge_slave_1) entered blocking state [ 2226.059750][T19717] bridge0: port 2(bridge_slave_1) entered disabled state [ 2226.059987][T19717] bridge_slave_1: entered allmulticast mode [ 2226.069656][T19717] bridge_slave_1: entered promiscuous mode [ 2226.126781][T19653] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2226.345449][T19717] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2226.382470][T19653] team0: Port device team_slave_0 added [ 2226.430956][T19717] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2226.434912][T19653] team0: Port device team_slave_1 added [ 2226.688129][T19717] team0: Port device team_slave_0 added [ 2226.696609][T19653] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2226.696628][T19653] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2226.696667][T19653] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2226.755571][T19717] team0: Port device team_slave_1 added [ 2227.150745][T16315] Bluetooth: hci2: command tx timeout [ 2228.097027][T19653] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2228.097084][T19653] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2228.097103][T19653] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2228.316867][T19717] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2228.316889][T19717] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2228.316920][T19717] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2228.342178][T19717] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2228.342198][T19717] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2228.342231][T19717] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2228.788855][T19653] hsr_slave_0: entered promiscuous mode [ 2228.790789][T19653] hsr_slave_1: entered promiscuous mode [ 2228.792027][T19653] debugfs: 'hsr0' already exists in 'hsr' [ 2228.792057][T19653] Cannot create hsr debugfs directory [ 2228.996858][T19717] hsr_slave_0: entered promiscuous mode [ 2229.004861][T19717] hsr_slave_1: entered promiscuous mode [ 2229.006198][T19717] debugfs: 'hsr0' already exists in 'hsr' [ 2229.006229][T19717] Cannot create hsr debugfs directory [ 2229.228576][T16315] Bluetooth: hci2: command tx timeout [ 2229.972408][T19834] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3042'. [ 2229.972448][T19834] openvswitch: netlink: Missing key (keys=c0, expected=100) [ 2232.875413][ T5260] 8021q: adding VLAN 0 to HW filter on device eth3 [ 2233.617580][T19844] xfrm0: entered promiscuous mode [ 2233.617622][T19844] xfrm0: entered allmulticast mode [ 2233.836151][T19847] fuse: Unknown parameter '' [ 2233.859322][T19847] overlayfs: upper fs does not support file handles, falling back to index=off. [ 2234.063735][T19758] bridge0: port 1(bridge_slave_0) entered blocking state [ 2234.063847][T19758] bridge0: port 1(bridge_slave_0) entered disabled state [ 2234.064039][T19758] bridge_slave_0: entered allmulticast mode [ 2234.066442][T19758] bridge_slave_0: entered promiscuous mode [ 2234.083037][T19758] bridge0: port 2(bridge_slave_1) entered blocking state [ 2234.083341][T19758] bridge0: port 2(bridge_slave_1) entered disabled state [ 2234.083535][T19758] bridge_slave_1: entered allmulticast mode [ 2234.086774][T19758] bridge_slave_1: entered promiscuous mode [ 2235.186014][T19850] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2235.714088][T19039] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 2235.866350][T19039] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 2235.878516][T19039] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 2235.880216][T19039] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 2235.890966][T19039] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 2236.254179][ T2925] hsr_slave_0: left promiscuous mode [ 2236.311644][ T2925] hsr_slave_1: left promiscuous mode [ 2236.313182][ T2925] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2236.387319][ T2925] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2238.088947][ T2925] hsr_slave_0: left promiscuous mode [ 2238.267457][T16315] Bluetooth: hci7: command tx timeout [ 2238.304162][ T2925] hsr_slave_1: left promiscuous mode [ 2238.305058][ T2925] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2238.393976][ T2925] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2240.301130][ T2925] team0 (unregistering): Port device team_slave_1 removed [ 2240.347234][T16315] Bluetooth: hci7: command tx timeout [ 2240.424588][ T2925] team0 (unregistering): Port device team_slave_0 removed [ 2242.428385][T16315] Bluetooth: hci7: command tx timeout [ 2243.153172][ T2925] team0 (unregistering): Port device team_slave_1 removed [ 2243.370784][ T2925] team0 (unregistering): Port device team_slave_0 removed [ 2244.207362][T19859] bond0: entered allmulticast mode [ 2244.207404][T19859] bond_slave_0: entered allmulticast mode [ 2244.207435][T19859] bond_slave_1: entered allmulticast mode [ 2244.208481][T19859] bridge0: port 3(bond0) entered blocking state [ 2244.208749][T19859] bridge0: port 3(bond0) entered disabled state [ 2244.219631][T19859] bond0: entered promiscuous mode [ 2244.219652][T19859] bond_slave_0: entered promiscuous mode [ 2244.219890][T19859] bond_slave_1: entered promiscuous mode [ 2244.225789][T19859] bridge0: port 3(bond0) entered blocking state [ 2244.226071][T19859] bridge0: port 3(bond0) entered forwarding state [ 2244.430072][T19758] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2244.463486][T19758] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2244.512729][T16315] Bluetooth: hci7: command tx timeout [ 2244.690140][T19758] team0: Port device team_slave_0 added [ 2244.722308][T19758] team0: Port device team_slave_1 added [ 2245.092167][T19758] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2245.095537][T19758] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2245.095576][T19758] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2245.115654][T19758] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2245.115673][T19758] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2245.115700][T19758] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2245.741759][T19872] binder: 19870:19872 ioctl 40046205 0 returned -22 [ 2246.474977][T19758] hsr_slave_0: entered promiscuous mode [ 2246.489272][T19758] hsr_slave_1: entered promiscuous mode [ 2246.505041][T19758] debugfs: 'hsr0' already exists in 'hsr' [ 2246.505075][T19758] Cannot create hsr debugfs directory [ 2247.616685][ T5260] 8021q: adding VLAN 0 to HW filter on device eth4 [ 2248.801934][T19855] bridge0: port 1(bridge_slave_0) entered blocking state [ 2248.802180][T19855] bridge0: port 1(bridge_slave_0) entered disabled state [ 2248.802467][T19855] bridge_slave_0: entered allmulticast mode [ 2248.848636][T19855] bridge_slave_0: entered promiscuous mode [ 2248.864751][T19855] bridge0: port 2(bridge_slave_1) entered blocking state [ 2248.864900][T19855] bridge0: port 2(bridge_slave_1) entered disabled state [ 2248.865146][T19855] bridge_slave_1: entered allmulticast mode [ 2248.898243][T19855] bridge_slave_1: entered promiscuous mode [ 2249.005321][T19855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2249.032022][T19855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2249.094747][T19855] team0: Port device team_slave_0 added [ 2249.105396][T19855] team0: Port device team_slave_1 added [ 2249.163215][T19855] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2249.163238][T19855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2249.163269][T19855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2249.175188][T19855] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2249.175211][T19855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2249.175241][T19855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2249.339450][T19855] hsr_slave_0: entered promiscuous mode [ 2249.341021][T19855] hsr_slave_1: entered promiscuous mode [ 2249.342122][T19855] debugfs: 'hsr0' already exists in 'hsr' [ 2249.342152][T19855] Cannot create hsr debugfs directory [ 2253.960357][T16292] usb 9-1: USB disconnect, device number 40 [ 2254.023206][T19915] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2254.290525][T19296] netdevsim netdevsim0: probe with driver netdevsim failed with error -12 [ 2255.047972][T19920] netlink: 36 bytes leftover after parsing attributes in process `syz.8.3053'. [ 2255.074696][T19920] netlink: 36 bytes leftover after parsing attributes in process `syz.8.3053'. [ 2255.791017][ T5611] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 2255.870079][ T5611] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 2255.887592][ T5611] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 2255.923386][ T5611] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 2255.924609][ T5611] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 2258.114678][T16315] Bluetooth: hci8: command tx timeout [ 2260.184701][T16315] Bluetooth: hci8: command tx timeout [ 2261.457303][T19956] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2262.157572][T16292] usb 9-1: new high-speed USB device number 41 using dummy_hcd [ 2262.265865][T16315] Bluetooth: hci8: command tx timeout [ 2262.334499][T16292] usb 9-1: Using ep0 maxpacket: 16 [ 2262.336872][T16292] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2262.339787][T16292] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2262.339853][T16292] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2262.339881][T16292] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2262.419745][T16292] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2262.419783][T16292] usb 9-1: Manufacturer: syz [ 2262.467091][T16292] usb 9-1: config 0 descriptor?? [ 2264.343862][T16315] Bluetooth: hci8: command tx timeout [ 2269.401529][T19923] bridge0: port 1(bridge_slave_0) entered blocking state [ 2269.553344][T19923] bridge0: port 1(bridge_slave_0) entered disabled state [ 2269.554028][T19923] bridge_slave_0: entered allmulticast mode [ 2269.557119][T19923] bridge_slave_0: entered promiscuous mode [ 2269.623234][T19923] bridge0: port 2(bridge_slave_1) entered blocking state [ 2269.623435][T19923] bridge0: port 2(bridge_slave_1) entered disabled state [ 2269.624485][T19923] bridge_slave_1: entered allmulticast mode [ 2269.678755][T19923] bridge_slave_1: entered promiscuous mode [ 2269.967397][T19923] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2269.994923][T19923] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2270.869669][T19923] team0: Port device team_slave_0 added [ 2270.891026][T19923] team0: Port device team_slave_1 added [ 2271.355851][T19923] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2271.355871][T19923] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2271.355901][T19923] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2271.366638][T19923] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2271.366656][T19923] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2271.366681][T19923] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2271.834325][T19923] hsr_slave_0: entered promiscuous mode [ 2271.839819][T19923] hsr_slave_1: entered promiscuous mode [ 2271.847645][T19923] debugfs: 'hsr0' already exists in 'hsr' [ 2271.847675][T19923] Cannot create hsr debugfs directory [ 2273.695699][ T5611] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2273.700587][ T5611] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2273.708989][ T5611] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2273.851297][ T5611] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2273.859866][ T5611] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2276.105608][T16315] Bluetooth: hci3: command tx timeout [ 2278.182932][T16315] Bluetooth: hci3: command tx timeout [ 2280.261807][ T5611] Bluetooth: hci3: command tx timeout [ 2280.315013][T19039] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 2280.459496][T19039] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 2280.548618][T19039] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 2280.592512][T19039] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 2280.600836][T19039] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 2282.341470][T16315] Bluetooth: hci3: command tx timeout [ 2282.992395][T16315] Bluetooth: hci9: command tx timeout [ 2283.493291][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 2283.978596][T19039] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2285.061203][T19039] Bluetooth: hci9: command tx timeout [ 2285.133530][T19039] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2285.373860][T19039] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2285.485094][T19039] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2285.486058][T19039] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2285.551817][T19039] Bluetooth: hci5: command 0x0406 tx timeout [ 2287.150719][T16315] Bluetooth: hci9: command tx timeout [ 2287.543530][T16315] Bluetooth: hci4: command tx timeout [ 2289.220883][T16315] Bluetooth: hci9: command tx timeout [ 2289.630331][ T5611] Bluetooth: hci4: command tx timeout [ 2291.710150][ T5611] Bluetooth: hci4: command tx timeout [ 2293.779806][ T5611] Bluetooth: hci4: command tx timeout [ 2295.221103][T20000] bridge0: port 1(bridge_slave_0) entered blocking state [ 2295.221266][T20000] bridge0: port 1(bridge_slave_0) entered disabled state [ 2295.221520][T20000] bridge_slave_0: entered allmulticast mode [ 2295.232971][T20000] bridge_slave_0: entered promiscuous mode [ 2295.426554][T20000] bridge0: port 2(bridge_slave_1) entered blocking state [ 2295.426716][T20000] bridge0: port 2(bridge_slave_1) entered disabled state [ 2295.426952][T20000] bridge_slave_1: entered allmulticast mode [ 2295.530422][T20000] bridge_slave_1: entered promiscuous mode [ 2297.033006][T20000] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2297.236093][T20000] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2298.202147][T20000] team0: Port device team_slave_0 added [ 2298.395104][T20000] team0: Port device team_slave_1 added [ 2298.562137][T16315] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 2298.642467][T16315] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 2298.673872][T16315] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 2298.686920][T16315] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 2298.691236][T16315] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 2301.075896][ T5611] Bluetooth: hci1: command 0x0406 tx timeout [ 2301.229123][ T5611] Bluetooth: hci10: command tx timeout [ 2301.524548][T20000] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2301.524569][T20000] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2301.524601][T20000] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2302.344614][T20000] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2302.344638][T20000] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2302.344669][T20000] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2303.378599][ T5611] Bluetooth: hci10: command tx timeout [ 2305.458180][T19039] Bluetooth: hci10: command tx timeout [ 2307.538025][T19039] Bluetooth: hci10: command tx timeout [ 2309.765088][T20000] hsr_slave_0: entered promiscuous mode [ 2309.902699][T20000] hsr_slave_1: entered promiscuous mode [ 2309.906013][T20000] debugfs: 'hsr0' already exists in 'hsr' [ 2309.906047][T20000] Cannot create hsr debugfs directory [ 2310.097128][T20019] bridge0: port 1(bridge_slave_0) entered blocking state [ 2310.097278][T20019] bridge0: port 1(bridge_slave_0) entered disabled state [ 2310.114288][T20019] bridge_slave_0: entered allmulticast mode [ 2310.131868][T20019] bridge_slave_0: entered promiscuous mode [ 2310.666786][T20019] bridge0: port 2(bridge_slave_1) entered blocking state [ 2310.666912][T20019] bridge0: port 2(bridge_slave_1) entered disabled state [ 2310.667199][T20019] bridge_slave_1: entered allmulticast mode [ 2310.683353][T20019] bridge_slave_1: entered promiscuous mode [ 2313.809383][T20019] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2314.118187][T20019] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2316.594740][T20036] bridge0: port 1(bridge_slave_0) entered blocking state [ 2316.594891][T20036] bridge0: port 1(bridge_slave_0) entered disabled state [ 2316.595128][T20036] bridge_slave_0: entered allmulticast mode [ 2316.639738][T20036] bridge_slave_0: entered promiscuous mode [ 2317.562938][T20036] bridge0: port 2(bridge_slave_1) entered blocking state [ 2317.579672][T20036] bridge0: port 2(bridge_slave_1) entered disabled state [ 2317.596227][T20036] bridge_slave_1: entered allmulticast mode [ 2317.679040][T20036] bridge_slave_1: entered promiscuous mode [ 2317.697711][T20019] team0: Port device team_slave_0 added [ 2319.160081][T20019] team0: Port device team_slave_1 added [ 2319.513572][T16315] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 2319.624500][T16315] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 2319.645752][T16315] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 2319.655406][T16315] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 2319.676840][T16315] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 2321.453333][T16315] Bluetooth: hci0: command 0x0406 tx timeout [ 2322.003575][T16315] Bluetooth: hci11: command tx timeout [ 2322.537662][T20036] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2323.937283][T20036] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2323.940387][T20019] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2323.940407][T20019] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2323.940439][T20019] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2324.096309][ T5611] Bluetooth: hci11: command tx timeout [ 2325.999640][T20019] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2325.999661][T20019] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2325.999690][T20019] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2326.175560][ T5611] Bluetooth: hci11: command tx timeout [ 2328.257763][ T5611] Bluetooth: hci11: command tx timeout [ 2329.140619][T20036] team0: Port device team_slave_0 added [ 2329.991069][T20036] team0: Port device team_slave_1 added [ 2333.623905][T20036] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2333.623929][T20036] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2333.623969][T20036] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2334.359421][T20019] hsr_slave_0: entered promiscuous mode [ 2334.361063][T20019] hsr_slave_1: entered promiscuous mode [ 2334.362162][T20019] debugfs: 'hsr0' already exists in 'hsr' [ 2334.362189][T20019] Cannot create hsr debugfs directory [ 2334.411889][T20036] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2334.411911][T20036] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2334.411942][T20036] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2336.258007][T19039] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 2336.342471][T19039] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 2336.353696][T19039] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 2336.614379][T19039] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 2336.642282][T19039] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 2336.760761][T16315] Bluetooth: hci6: command 0x0406 tx timeout [ 2338.073194][T20036] hsr_slave_0: entered promiscuous mode [ 2338.092412][T20036] hsr_slave_1: entered promiscuous mode [ 2338.102593][T20036] debugfs: 'hsr0' already exists in 'hsr' [ 2338.102630][T20036] Cannot create hsr debugfs directory [ 2339.453692][ T5611] Bluetooth: hci12: command tx timeout [ 2340.969810][T19039] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 2341.100132][ T38] INFO: task syz-executor:19396 blocked for more than 143 seconds. [ 2341.100163][ T38] Tainted: G L syzkaller #0 [ 2341.100175][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2341.100184][ T38] task:syz-executor state:D stack:21552 pid:19396 tgid:19396 ppid:1 task_flags:0x400140 flags:0x00080002 [ 2341.100238][ T38] Call Trace: [ 2341.100247][ T38] [ 2341.100261][ T38] __schedule+0x16d9/0x5700 [ 2341.100327][ T38] ? __pfx___schedule+0x10/0x10 [ 2341.100368][ T38] rt_mutex_schedule+0x76/0xf0 [ 2341.100396][ T38] rt_mutex_slowlock_block+0x55e/0x690 [ 2341.100434][ T38] rt_mutex_slowlock+0x2d4/0x780 [ 2341.100469][ T38] ? rt_mutex_slowlock+0x1f2/0x780 [ 2341.100492][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 2341.100533][ T38] ? new_device_store+0x13c/0x6d0 [ 2341.100685][ T38] ? new_device_store+0x13c/0x6d0 [ 2341.100706][ T38] mutex_lock_nested+0x168/0x1d0 [ 2341.100726][ T38] ? lock_acquire+0x115/0x350 [ 2341.100754][ T38] new_device_store+0x13c/0x6d0 [ 2341.100780][ T38] ? __pfx_new_device_store+0x10/0x10 [ 2341.100804][ T38] ? sysfs_file_kobj+0x1a/0x230 [ 2341.100827][ T38] ? sysfs_file_kobj+0x1e4/0x230 [ 2341.100848][ T38] ? sysfs_kf_write+0x166/0x260 [ 2341.100870][ T38] ? __pfx_sysfs_kf_write+0x10/0x10 [ 2341.100887][ T38] kernfs_fop_write_iter+0x3a5/0x540 [ 2341.100921][ T38] vfs_write+0x61e/0xbb0 [ 2341.100954][ T38] ? __pfx_vfs_write+0x10/0x10 [ 2341.100980][ T38] ? do_sys_openat2+0x14e/0x200 [ 2341.101008][ T38] ? kmem_cache_free+0x187/0x6d0 [ 2341.101052][ T38] ksys_write+0x156/0x270 [ 2341.101077][ T38] ? __pfx_ksys_write+0x10/0x10 [ 2341.101110][ T38] do_syscall_64+0x166/0x520 [ 2341.101128][ T38] ? trace_irq_disable+0x3b/0x140 [ 2341.101152][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2341.101172][ T38] ? clear_bhb_loop+0x70/0xc0 [ 2341.101193][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2341.101211][ T38] RIP: 0033:0x7fa41615e98e [ 2341.101229][ T38] RSP: 002b ** replaying previous printk message ** [ 2341.101229][ T38] RSP: 002b:00007ffeda3c1578 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2341.101249][ T38] RAX: ffffffffffffffda RBX: 000055558139e500 RCX: 00007fa41615e98e [ 2341.101263][ T38] RDX: 0000000000000003 RSI: 00007ffeda3c1600 RDI: 0000000000000005 [ 2341.101275][ T38] RBP: 00007fa416235912 R08: 0000000000000000 R09: 0000000000000000 [ 2341.101287][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 2341.101298][ T38] R13: 00007ffeda3c1600 R14: 00007fa416f54620 R15: 0000000000000003 [ 2341.101328][ T38] [ 2341.101375][ T38] [ 2341.101375][ T38] Showing all locks held in the system: [ 2341.101385][ T38] locks held by kworker/u8:0/12: 3, on CPU#1: [ 2341.101435][ T38] #0: ffff88813ff64138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 2341.101539][ T38] #1: ffffc90000117c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 2341.101588][ T38] #2: ffffffff8f5d4ff8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 2341.101667][ T38] locks held by rcuc/1/28: 5, last CPU#1: [ 2341.101700][ T38] #0: ffffffff8e059540 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 2341.101750][ T38] #1: ffffffff8e1c3cc0 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 2341.101800][ T38] #2: ffffffff8e1c3de0 (rcu_callback){....}-{0:0}, at: rcu_cpu_kthread+0x217/0x1740 [ 2341.101853][ T38] #3: ffffffff8e059540 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 2341.101897][ T38] #4: ffff8880b873e218 (&ul->lock){+...}-{3:3}, at: ipv4_dst_destroy+0x102/0x230 [ 2341.102006][ T38] locks held by ksoftirqd/1/30: 4, last CPU#1: [ 2341.102019][ T38] #0: ffffffff8e059540 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 2341.102064][ T38] #1: ffffffff8e1c3cc0 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 2341.102111][ T38] #2: ffffffff8e1c3cc0 (rcu_read_lock){....}-{1:3}, at: process_backlog+0x261/0xc50 [ 2341.102199][ T38] #3: ffffffff8e1c3cc0 (rcu_read_lock){....}-{1:3}, at: NF_HOOK+0x9e/0x3c0 [ 2341.102319][ T38] locks held by khungtaskd/38: 1, last CPU#1: [ 2341.102336][ T38] #0: ffffffff8e1c3cc0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 2341.102397][ T38] locks held by kworker/u8:7/155: 2, on CPU#0: [ 2341.102408][ T38] #0: ffff88813ff64138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 2341.102468][ T38] #1: ffffc9000422fc40 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 2341.102536][ T38] locks held by kworker/u8:11/2925: 5, on CPU#0: [ 2341.102549][ T38] #0: ffff88801aeb0938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 2341.102597][ T38] #1: ffffc9000e347c40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 2341.102645][ T38] #2: ffffffff8f5c67a0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf5/0x810 [ 2341.102736][ T38] #3: ffff888054361978 (&wg->device_update_lock){+.+.}-{4:4}, at: wg_destruct+0x116/0x310 [ 2341.102834][ T38] #4: ffffffff8e1c9f30 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 2341.102877][ T38] locks held by kworker/u8:13/2928: 7, last CPU#1: [ 2341.102890][ T38] #0: ffff88813ff64138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 2341.102937][ T38] #1: ffffc9000e397c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 2341.102988][ T38] #2: ffff88803e668310 (&devlink->lock_key#11){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xcb0 [ 2341.103061][ T38] #3: ffff88806134a920 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1e0/0xcb0 [ 2341.103127][ T38] #4: ffffffff8e1c3cc0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 2341.103171][ T38] #5: ffffffff8e1c3cc0 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 2341.103475][ T38] #6: ffffffff8e1c3cc0 (rcu_read_lock){....}-{1:3}, at: sched_balance_domains+0xe8/0x880 [ 2341.103530][ T38] locks held by getty/5353: 2, on CPU#0: [ 2341.103543][ T38] #0: ffff888036f4b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 2341.103667][ T38] #1: ffffc900044d62e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x460/0x1360 [ 2341.103718][ T38] locks held by kworker/u9:5/5611: 12, last CPU#0: [ 2341.103731][ T38] #0: ffff8880652d6938 ((wq_completion)hci13){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 2341.103778][ T38] #1: ffffc900058efc40 ((work_completion)(&hdev->power_on)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 2341.103825][ T38] #2: ffff8880590a0f80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_power_on+0x1a2/0x750 [ 2341.103937][ T38] #3: ffffffff8e1c3cc0 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 2341.103984][ T38] #4: ffff8880b86241a0 (tasklet_sync_callback.cb_lock){+...}-{3:3}, at: tasklet_action_common+0xc5/0x600 [ 2341.104033][ T38] #5: ffffffff8e1c3cc0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 2341.104076][ T38] #6: ffffffff8e1c3cc0 (rcu_read_lock){....}-{1:3}, at: ieee80211_rx_napi+0xd1/0x3d0 [ 2341.104191][ T38] #7: ffffffff8e059540 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 2341.104246][ T38] #8: ffff888052f81d78 (&local->rx_path_lock){+...}-{3:3}, at: ieee80211_rx_handlers+0x120/0xc8d0 [ 2341.104299][ T38] #9: ffffffff8e1c3cc0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 2341.104343][ T38] #10: ffffffff8e1c3cc0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 2341.104386][ T38] #11: ffff8880305b2a40 (&p->pi_lock){-...}-{2:2}, at: try_to_wake_up+0x67/0x1430 [ 2341.104429][ T38] locks held by kworker/0:5/5722: 3, last CPU#0: [ 2341.104442][ T38] #0: ffff88813ff26538 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 2341.104499][ T38] #1: ffffc9000607fc40 ((gc_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 2341.104545][ T38] #2: ffffffff8ed0f918 ("ratelimiter_table_lock"){+.+.}-{3:3}, at: wg_ratelimiter_gc_entries+0x5d/0x470 [ 2341.104589][ T38] locks held by kworker/1:6/5738: 2, on CPU#1: [ 2341.104601][ T38] #0: ffff88813ff27938 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 2341.104647][ T38] #1: ffffc9000617fc40 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 2341.104698][ T38] locks held by kworker/u8:19/17299: 4, on CPU#1: [ 2341.104711][ T38] #0: ffff88813ff64138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 2341.104759][ T38] #1: ffffc900037f7c40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 2341.104806][ T38] #2: ffff888052f80938 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 2341.104884][ T38] #3: ffff888052f808a0 (&rdev->wiphy_work_lock){+.+.}-{3:3}, at: cfg80211_wiphy_work+0xed/0x420 [ 2341.104935][ T38] locks held by syz.8.2967/19239: 1, on CPU#1: [ 2341.104948][ T38] #0: ffffffff8e1c9f30 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 2341.104994][ T38] locks held by syz-executor/19296: 1, on CPU#0: [ 2341.105008][ T38] #0: ffffffff8e1c9f30 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 2341.105048][ T38] locks held by syz-executor/19396: 4, on CPU#1: [ 2341.105060][ T38] #0: ffff888036494510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 2341.105107][ T38] #1: ffff8880213e9478 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 2341.105155][ T38] #2: ffff888029d554b8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 2341.105207][ T38] #3: ffffffff8ee45478 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: new_device_store+0x13c/0x6d0 [ 2341.105258][ T38] locks held by syz-executor/19511: 7, on CPU#1: [ 2341.105271][ T38] #0: ffff888036494510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 2341.105322][ T38] #1: ffff88803a6b9878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 2341.105371][ T38] #2: ffff888029d553c8 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 2341.325761][ T38] #3: ffffffff8ee45478 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 2341.325846][ T38] #4: ffff888034aeb160 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb9/0x880 [ 2341.325993][ T38] #5: ffff888038bc4310 (&devlink->lock_key#44){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x160 [ 2341.326053][ T38] #6: ffffffff8e1c9f30 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 2341.326112][ T38] locks held by syz-executor/19653: 4, on CPU#0: [ 2341.326129][ T38] #0: ffff888036494510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 2341.326193][ T38] #1: ffff88803b6b3c78 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 2341.326258][ T38] #2: ffff888029d553c8 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 2341.326326][ T38] #3: ffffffff8ee45478 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 2341.326389][ T38] locks held by syz-executor/19717: 4, on CPU#0: [ 2341.326406][ T38] #0: ffff888036494510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 2341.326467][ T38] #1: ffff888060fb3478 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 2341.326539][ T38] #2: ffff888029d553c8 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 2341.326607][ T38] #3: ffffffff8ee45478 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 2341.326668][ T38] locks held by syz-executor/19758: 4, on CPU#0: [ 2341.326684][ T38] #0: ffff888036494510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 2341.326744][ T38] #1: ffff88803b8a1078 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 2341.326806][ T38] #2: ffff888029d553c8 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 2341.326874][ T38] #3: ffffffff8ee45478 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 2341.326940][ T38] locks held by syz-executor/19855: 4, on CPU#0: [ 2341.326956][ T38] #0: ffff888036494510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 2341.327017][ T38] #1: ffff88801aeea478 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 2341.327078][ T38] #2: ffff888029d553c8 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 2341.327145][ T38] #3: ffffffff8ee45478 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 2341.327207][ T38] locks held by syz-executor/19923: 4, on CPU#1: [ 2341.353738][T19039] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 2341.427766][ T38] #0: ffff888036494510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 2341.427844][ T38] #1: ffff888034710c78 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 2341.427904][ T38] #2: ffff888029d553c8 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 2341.427975][ T38] #3: ffffffff8ee45478 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 2341.428032][ T38] locks held by syz.8.3060/19972: 1, on CPU#0: [ 2341.428049][ T38] #0: ffffffff8e1c9f30 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 2341.428099][ T38] locks held by syz-executor/20000: 4, on CPU#0: [ 2341.428114][ T38] #0: ffff888036494510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 2341.428166][ T38] #1: ffff888060620c78 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 2341.428219][ T38] #2: ffff888029d553c8 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 2341.428278][ T38] #3: ffffffff8ee45478 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 2341.428330][ T38] locks held by syz-executor/20019: 1, last CPU#0: [ 2341.428345][ T38] #0: ffffffff8e1c3cc0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 2341.428398][ T38] locks held by syz-executor/20036: 2, on CPU#0: [ 2341.428413][ T38] #0: ffffffff8ee0c908 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 2341.428466][ T38] #1: ffffffff8f5d4ff8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc10/0x1c30 [ 2341.428597][ T38] locks held by syz-executor/20087: 1, on CPU#1: [ 2341.428611][ T38] #0: ffffffff8f5d4ff8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc10/0x1c30 [ 2341.428666][ T38] locks held by syz-executor/20117: 3, last CPU#0: [ 2341.428681][ T38] #0: ffffffff8f5c67a0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x524/0x780 [ 2341.428735][ T38] #1: ffffffff8f5d4ff8 (rtnl_mutex){+.+.}-{4:4}, at: ip_tunnel_init_net+0x2d5/0x820 [ 2341.428829][ T38] #2: ffffffff8e1c3cc0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 2341.428879][ T38] locks held by modprobe/20145: 2, last CPU#0: [ 2341.428893][ T38] #0: ffff888026cbf030 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1e0/0x4e0 [ 2341.428940][ T38] #1: ffffffff8e1c3cc0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 2341.428999][ T38] [ 2341.429004][ T38] ============================================= [ 2341.429004][ T38] [ 2341.429014][ T38] NMI backtrace for cpu 0 [ 2341.429034][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2341.429059][ T38] Tainted: [L]=SOFTLOCKUP [ 2341.429067][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2341.429079][ T38] Call Trace: [ 2341.429088][ T38] [ 2341.429098][ T38] dump_stack_lvl+0xe8/0x150 [ 2341.429129][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 2341.429155][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2341.429178][ T38] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 2341.429205][ T38] sys_info+0x135/0x170 [ 2341.429227][ T38] watchdog+0xfd7/0x1030 [ 2341.429259][ T38] ? watchdog+0x1c7/0x1030 [ 2341.429289][ T38] kthread+0x38b/0x470 [ 2341.429310][ T38] ? __pfx_watchdog+0x10/0x10 [ 2341.429332][ T38] ? __pfx_kthread+0x10/0x10 [ 2341.429353][ T38] ret_from_fork+0x514/0xb70 [ 2341.429377][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 2341.429397][ T38] ? __switch_to+0xc89/0x1420 [ 2341.429427][ T38] ? __pfx_kthread+0x10/0x10 [ 2341.429448][ T38] ret_from_fork_asm+0x1a/0x30 [ 2341.429482][ T38] [ 2341.429491][ T38] Sending NMI from CPU 0 to CPUs 1: [ 2341.429517][ C1] NMI backtrace for cpu 1 [ 2341.429534][ C1] CPU: 1 UID: 0 PID: 17 Comm: pr/ttyS0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2341.429557][ C1] Tainted: [L]=SOFTLOCKUP [ 2341.429564][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2341.429574][ C1] RIP: 0010:io_serial_out+0x7c/0xc0 [ 2341.429650][ C1] Code: d0 64 fc 44 89 f9 d3 e5 49 83 ee 80 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 6c bf d0 fc 41 03 2e 89 d8 89 ea ee <5b> 41 5c 41 5e 41 5f 5d c3 cc cc cc cc cc 44 89 f9 80 e1 07 38 c1 [ 2341.429666][ C1] RSP: 0018:ffffc90000167900 EFLAGS: 00000202 [ 2341.429682][ C1] RAX: 0000000000000020 RBX: 0000000000000020 RCX: 0000000000000000 [ 2341.429694][ C1] RDX: 00000000000003f8 RSI: 0000000000000000 RDI: 0000000000000000 [ 2341.429705][ C1] RBP: 00000000000003f8 R08: 0000000000000000 R09: 0000000000000000 [ 2341.429716][ C1] R10: dffffc0000000000 R11: ffffffff8561e370 R12: dffffc0000000000 [ 2341.429729][ C1] R13: 0000000000000020 R14: ffffffff99ea53e0 R15: 0000000000000000 [ 2341.429741][ C1] FS: 0000000000000000(0000) GS:ffff888125cc8000(0000) knlGS:0000000000000000 [ 2341.429755][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2341.429768][ C1] CR2: 00007f82c207fe9c CR3: 0000000012316000 CR4: 00000000003526f0 [ 2341.429786][ C1] Call Trace: [ 2341.429793][ C1] [ 2341.429802][ C1] __serial8250_console_fifo_write+0x1ec/0x3f0 [ 2341.429839][ C1] serial8250_console_write+0xac5/0x1230 [ 2341.429864][ C1] ? __pfx_serial8250_console_write+0x10/0x10 [ 2341.429893][ C1] nbcon_emit_next_record+0xef5/0x1a90 [ 2341.429922][ C1] ? __pfx_nbcon_emit_next_record+0x10/0x10 [ 2341.429945][ C1] ? nbcon_context_try_acquire+0x819/0xbd0 [ 2341.429977][ C1] nbcon_kthread_func+0x679/0x880 [ 2341.430001][ C1] ? nbcon_kthread_func+0x163/0x880 [ 2341.430020][ C1] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 2341.430044][ C1] ? __kthread_parkme+0x71/0x1f0 [ 2341.430067][ C1] ? __kthread_parkme+0x199/0x1f0 [ 2341.430091][ C1] kthread+0x38b/0x470 [ 2341.430108][ C1] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 2341.430127][ C1] ? __pfx_kthread+0x10/0x10 [ 2341.430144][ C1] ret_from_fork+0x514/0xb70 [ 2341.430162][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 2341.430178][ C1] ? __switch_to+0xc89/0x1420 [ 2341.430201][ C1] ? __pfx_kthread+0x10/0x10 [ 2341.430218][ C1] ret_from_fork_asm+0x1a/0x30 [ 2341.430241][ C1] [ 2341.430515][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 2343.022453][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2343.033659][ T38] Tainted: [L]=SOFTLOCKUP [ 2343.037988][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2343.048063][ T38] Call Trace: [ 2343.051349][ T38] [ 2343.054287][ T38] vpanic+0x56d/0xa60 [ 2343.058281][ T38] ? __pfx_vpanic+0x10/0x10 [ 2343.062786][ T38] ? console_srcu_read_unlock+0x3a/0x60 [ 2343.068348][ T38] panic+0xc5/0xd0 [ 2343.072072][ T38] ? __pfx_panic+0x10/0x10 [ 2343.076490][ T38] ? wq_watchdog_touch+0xf9/0x160 [ 2343.081526][ T38] ? nmi_trigger_cpumask_backtrace+0x24d/0x390 [ 2343.087698][ T38] watchdog+0x1030/0x1030 [ 2343.092042][ T38] ? watchdog+0x1c7/0x1030 [ 2343.096558][ T38] kthread+0x38b/0x470 [ 2343.100639][ T38] ? __pfx_watchdog+0x10/0x10 [ 2343.105330][ T38] ? __pfx_kthread+0x10/0x10 [ 2343.109933][ T38] ret_from_fork+0x514/0xb70 [ 2343.114528][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 2343.119642][ T38] ? __switch_to+0xc89/0x1420 [ 2343.124328][ T38] ? __pfx_kthread+0x10/0x10 [ 2343.128928][ T38] ret_from_fork_asm+0x1a/0x30 [ 2343.133715][ T38] [ 2343.137051][ T38] Kernel Offset: disabled [ 2343.141451][ T38] Rebooting in 86400 seconds..