last executing test programs: 31.364800943s ago: executing program 0 (id=126): sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {{}, {}, {0xc, 0x14, 'syz0\x00'}}}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x10) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[], 0x0, 0x35, 0x0, 0x1}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000eb0626f50000000000080000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x4fa, &(0x7f0000000cc0)=""/4096, 0x40f00, 0x5, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0x2, 0x4, 0x9}, 0x1, 0x0, 0x0, 0x64, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xd4}, 0x94) 24.247546964s ago: executing program 2 (id=134): unshare(0x2000400) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x6, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r1, &(0x7f00000002c0), 0x0, 0x20004004) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) ioctl$XFS_IOC_START_COMMIT(r1, 0x80585882, &(0x7f0000000080)={0xffffffffffffffff}) openat(r2, &(0x7f0000000100)='./file0\x00', 0x331800, 0x120) r3 = socket$kcm(0xa, 0x2, 0x0) r4 = socket(0x2, 0x80805, 0x0) utimensat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', &(0x7f00000002c0)={{0x0, 0x3fffffff}}, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'team_slave_1\x00', 0x0}) connect$can_bcm(r4, &(0x7f0000000240)={0x1d, r6}, 0x10) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010105, 0x4e20, 0x3, 'lblcr\x00', 0x30, 0x660f5380, 0x3}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000440)={{0x84, @broadcast, 0x4f29, 0x3, 'dh\x00', 0x5, 0xc, 0x6c}, {@rand_addr=0x64010101, 0x4e23, 0x10002, 0x1, 0x1}}, 0x44) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0xe0, @dev={0xfe, 0x80, '\x00', 0xfd}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 23.413963122s ago: executing program 0 (id=137): r0 = socket$inet6(0xa, 0x3, 0x7) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) migrate_pages(0x0, 0x5, &(0x7f0000000040)=0x9, &(0x7f0000000080)=0x272) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000", 0x15) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000100)=0x8001, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23, 0xa, @empty, 0x9}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000480)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0xb, @loopback, 0x1}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000140)='2', 0x1}], 0x1}}], 0x1, 0x8000) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r4, 0x7b0, 0x0) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e23, 0xfff, @ipv4={'\x00', '\xff\xff', @local}, 0x1000}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000000680)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0xab, @loopback, 0x8}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000900)='2', 0x1}], 0x1}}], 0x1, 0x20000014) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x2000c015}, 0x2404c8c0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10688, 0x20000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0xfc}]}}}]}, 0x3c}}, 0x44006) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xd, 0x20000000000000bb, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) 16.908569019s ago: executing program 3 (id=142): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0xfffffffffffffffe) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r3}, 0xc) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r4, 0x7a5, &(0x7f00000000c0)={{@hyper, 0xfffffffc}, 0x1, 0x1, 0x4}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) getsockopt$sock_buf(r7, 0x1, 0x1c, 0x0, &(0x7f0000000040)) mount(0x0, &(0x7f0000001040)='./mnt_trace\x00', &(0x7f0000001080)='tracefs\x00', 0x0, 0x0) 16.629524447s ago: executing program 0 (id=144): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x8, &(0x7f00000002c0)=0x80000000000003) bpf$MAP_CREATE(0x0, 0x0, 0x50) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x10) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./mnt\x00', 0x0, 0xa0) getdents64(r5, 0x0, 0x0) 15.591280386s ago: executing program 3 (id=146): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1], 0x44}}, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r2, 0x400452c8, &(0x7f0000000100)) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(0x0, r3, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c9, &(0x7f0000000100)) 14.024014517s ago: executing program 0 (id=147): sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {{}, {}, {0xc, 0x14, 'syz0\x00'}}}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x10) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[], 0x0, 0x35, 0x0, 0x1}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000eb0626f50000000000080000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x4fa, &(0x7f0000000cc0)=""/4096, 0x40f00, 0x5, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0x2, 0x4, 0x9}, 0x1, 0x0, 0x0, 0x64, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xd4}, 0x94) 13.67747333s ago: executing program 3 (id=149): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mremap(&(0x7f0000097000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000bff000/0x400000)=nil) userfaultfd(0x80001) socket(0xa, 0x801, 0x0) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="042f014b"], 0x4) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) accept$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000100)=0x1c) 13.398589695s ago: executing program 1 (id=150): userfaultfd(0x801) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}], 0x58}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c86, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 12.772184044s ago: executing program 1 (id=151): unshare(0x2000400) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x6, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, 0x0, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r1, &(0x7f00000002c0), 0x0, 0x20004004) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) ioctl$XFS_IOC_START_COMMIT(r1, 0x80585882, &(0x7f0000000080)={0xffffffffffffffff}) openat(r2, &(0x7f0000000100)='./file0\x00', 0x331800, 0x120) r3 = socket$kcm(0xa, 0x2, 0x0) r4 = socket(0x2, 0x80805, 0x0) utimensat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', &(0x7f00000002c0)={{0x0, 0x3fffffff}}, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'team_slave_1\x00', 0x0}) connect$can_bcm(r4, &(0x7f0000000240)={0x1d, r6}, 0x10) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010105, 0x4e20, 0x3, 'lblcr\x00', 0x30, 0x660f5380, 0x3}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000440)={{0x84, @broadcast, 0x4f29, 0x3, 'dh\x00', 0x5, 0xc, 0x6c}, {@rand_addr=0x64010101, 0x4e23, 0x10002, 0x1, 0x1}}, 0x44) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0xe0, @dev={0xfe, 0x80, '\x00', 0xfd}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 11.318550155s ago: executing program 1 (id=152): setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x5, @loopback, 0xa}}, 0x0, 0x0, 0x3d, 0x0, "bb02a3c364ca41d6e5415445244740bd4c0b42a21d7214bf92594925208a0e2f964e654dc534a6324d4993fcf19b2df3ee818a118a7c49462189316d8b6d2ccd00"}, 0xd8) socket$kcm(0x23, 0x5, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x810018, 0x0) r1 = io_uring_setup(0x66a5, &(0x7f0000000100)={0x0, 0xd67, 0x800, 0xfffffffc, 0x87}) r2 = eventfd2(0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f0000000000)=r2, 0x1) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001a80)=[{0x0}], 0x0, 0x1}, 0x20) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, 0x0, 0x0) listen(r5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./trace/trace\x00', 0x202, 0x0) 10.73973931s ago: executing program 2 (id=154): r0 = socket(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000007c0)="7800000018002502b9409b02ffff48000203be04020406050a08040c5c000900580004000a0000000d0085a168d0bf46d32345653600648d270005000a00000049935ade4a460c89b6ec0cff3959547f509058ba86c902007a00", 0x5a, 0x0, 0x0, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000003c0)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0xbbd25b33d864198e, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r4, &(0x7f0000000880)="723a732f70202e2f66696c65303a300c257e858054d731b2b72d0849e986da55ec26f9a5ef422a361934e770f5ae8b6feec32162daa559a68255c18c0741145fcaf8e4d471040cadda4d1332ed0d25", 0x4f) syz_open_dev$tty1(0xc, 0x4, 0x1) setsockopt$WPAN_WANTLQI(r2, 0x0, 0x3, &(0x7f0000000100), 0x4) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a00590214f9f407000904101f00000000000000000200000800040001000000", 0x24) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f00000000c0)=0x8000) ioctl$TIOCVHANGUP(r1, 0x5437, 0x2) 8.068053408s ago: executing program 2 (id=157): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={{0x14}, [@NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3cd2e7b3d6526bf5}}}, 0x5c}}, 0x0) r2 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r2, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001640)="5346f7f875528ef24043c68e04180a332e94ee4784fffee263c06f2d924e8699b6af71aa257b5a316af31628e5148c7012f4d55ce4c29fea9e5b0b61fdf0b2dc866fa81b4e775e235eaebe330e16114548f147b8a966bf1f1fc6c24b9d47d349c87c3f789d2ba608cd25b17b6c80a7f0ceb4a06ff270ff8c9f0d3a19133f1fdfd51b767b8cef1f36e5490c5df5fcb378a6fb6eb5d8aaf7791ce81f61a05e1ebdd1789eb70ac1f3dfed378f6f3e237120052113a75ab977796117f7e7b2d6ee499f51dc070c820d10a0eaef4fc94ddc648bafae070caf70c465267497b3de963df649e113e2060c82b057abfae0798d424c81aeb42796189eb0936a2c547a5c4d6351ed786c75beb926118fb7af49ecc00b545fe2563bd4294a982980afed3f9cf390f304611db4c6d7b64d64f38db5fde5cf7cadb29c697013b710e0218660671d0051ddd7fb7f5eb72a34f469b2e20600000091817eb5b952af43d1a40f4770e7220fcdfe25d3e9747e2af76ece5922724840afdba6f6f9e1d11db8561e8e836413ee04d6e084700ec1ac0e00569f0e4d4844f4710299aabbef615c33e276544669ce074528938ec0cc6d2af1ce7a47a64ad676f08507aa08d4210f979ef4aacfa4d524c9952d4743d65c3c527302942a8880116ce7ebc6c84778346f02c806bb466db7d313d7ebc7ea87823d4a8de0b697929fb3277012327827801f75ca3c5776d1a81acb160007f73148dfaf05ab7eed5a0e603ac468eb2bcd9de5f140758e74c20a9931187e0cbc857aa62a4cec8a62f7e31af3a78cdb8608551cdd68e83aebb3c9e05519184ff996c336553fa6bf16865cd6c4eacf1e360b029cdae41070f569a15bfd30f671c0a2fd183ea0eaae427505d56994ccfd0737aae3abbc45f56710d2e3f2662bf4514044f7fa03cde28fa1783970d3c676cb23cb1923a9feb233267ef663936ccf25f7597a2270724527bf468d22786d0548b25582180b72c51742c4e5c373a1008dd4cfba508e8f3f8ec35e6f1375a11b1fbe2dc09e9fe609e80112c8f5c895c922cd547def707b7252d7afa0030d008b1dd10fd4a56e30237a6e0229fb4562cb8df3d4e64b28e15c075e59554e9d61a6065d49c1e765a49195cf5d6b1e2b6192447817fedfe41fcdf9a4fc5af567906e4b6453da7b97eac255cc253d7bceba09f67da4815438583c6843366b76d9e9277558e48681e9cfa920b47aea0e5c46ef86ea7f1ef534cf7565b24b833ba2cbfe60e6271614850dd68f2a8a6be4f315b83abb8e2699ed8e2a4b3506f9dacbb180c4deeef7489f49faf34cdf4e91a402956564f854d71c892e4aada1c91647ce45d4834d000e8d5be1773ecae388e511228977a69d4cc67fbab60ee1555a219e41eebc31807a87d9cbe88a8b05959e1a988f6ea6ed73a6ac1ec2f3d74d73eaa91a39308e008b7fa1ecc2a020d950a777c0d8d131416ef55a4ec041113df65ba4aea92fcb3e2268510f316bd17f04993b6473338fe7c08fd9874e743a31582162232c7d6c614e7b3513abcc0feb99b2c9111300004fe291f5bd682c039183e61c1fdac90b2a015939a8d10b07a05e99e5772b4b9329275cef8de2b066d4e4d421e4a0a69cdd8f674b12f5b3fa764e4b1e9f4d767e252e37577813a03f18da16d598fddcf4be590d9f65f64c647cb2f330a614fe688d3d80182ed8aa59905a1cb0d3f034d927e070d71f56ee8e5c5bdf23c4f85c7a17834467bd6cf58218868fe53e3675c130bbe44bea271fa67999a0dc3dbf7c40dbba6e7d6cc0936bd8d466a1f041883c093a3a60743d0549b1a989a2fa41ff978388014434909053e279a21e7866bd4efb4a9f46b7a8b0d1d84d83020e9e68936ca3de030269784aa29a3e25146cd5b03d21ca82f961be925c9ad487fb24b1e35c2d043ee4b6a4aaf811c4308a6ced6b4c45e7513a3f0e1421cb3b0fd8571a7085c9a4b454e4ee8b44767428666cd108b78369b871ab32f36943e24976f4bb6bd4068cc19585a2de791e3f950d220b28f4ba268d8c9dbccc1a705b1b1c30881babdbc8cc4cf97b801e4d410fd7c61b34b1f1265b9d114c99fb469914a213bb289c5bdf5af3835d089a2300"/1504, 0x5e0}, {&(0x7f0000000600)="3001fb90647586f4601659c5ad2644b99bfd65452e947b394c96c29278d097c5f170d77283a744139d2ce2a2f4bb5bb37e7396e7bac14056f25d17145e73bc2461b20ea3fce771f1b32d1585e8a456763cfafcf7189145a6e261af6232014cbf8a0f898bf6d14136874b6a1fd7caf8ec9966b0419be0420dc6e247d1a44f038ae29eb4bc67d6a04e80dfb7715ebafaa20fcbc57ade23cba05da1fbe4bba675b742472eebaabf356adc99866930e146125a272cef5baf5dfad4a28a01208d9908183ab2085a781e531f1bed4ac9c245ec19be383047656a7d857d364e6f69eccea5aca3964f", 0xe5}, {&(0x7f0000000b00)="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", 0x18e}, {&(0x7f0000000cc0)="f2a0f0f863621b483b19e7ecfce0d34e53fbf295927214684f4d69e90f0ec506442d2126c3f5ab0cdfd79dc1815274c3ee57068b3793c25fab48eb353478689f452328afb023f75f93229060bc2c82dd05d1e8c3a549a06e280ca4eaf77b4aed57a0c5f6120d25a3d5121895638ec5e2e600000000f5be12a64e075c60dd63e0b00e8f42bfb7671a56925477029cec7e7f16b358404edfb5e7a055fdeb2ba044d0d54e341d1d1ef1eb2c317f587f591626ceed08555ca0b2f31a3e7bf5ba7541db275e6a6b6501b87cc74c4804f6da7d3de93327287204cc97f9cb747576d2ab23a6e35c6da6b3240c92ae18b31cb6e7bc60066994e2cb401c76b1840d3e231621355f10ff35ea91ffd463228d000000000000000e454d3c36efee949f6311c6ad78b5a8f091d2ebb008925107e4a4584dab83f7f0cb5ad94266e71e2b7aaa01cf4f9f5e1d52e1e5086e9633cbee8126a200", 0x152}, {&(0x7f0000000700)="15c84609b06c6d85a5ca6f3a9a242f214aee4e7093161b717090c0c852a05393abd8992d91576f57bbd3488e85d8456d6c6c09de5c5228ee18819665861f01a2823a7cfa8e9260a5fe3921638db2dc5156149f86916810f913a944e1c8cd7fccb63f37900c5b287016e512b050ca214125b2217260c9ce3019e88b80985402ff7ca34be17e0dbda4f028cec9973a2b9eed83eee86f35f2c0adf50a04", 0x9c}], 0x5, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @loopback}}}], 0x20}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x50) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0xffffffffffffff5e, &(0x7f0000009b00)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c0000000c0a010100000000000000000a0000070900020073797a31000000000900010073797a3100000000300003802c0000800800034000000002240007800e000100636f6e6e6c696d69740000000c000280080001400000000714000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x24000850}, 0x4000040) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x6, 0x3, 0x0, 0x7fff8000}]}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="110000000000000000", @ANYRES32=0x0, @ANYBLOB="a584d110e6bf"], 0x20) mkdir(&(0x7f00000000c0)='./file0\x00', 0x143) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x7, 0xff, 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000a40)='./file0\x00', 0x2) close_range(r3, 0xffffffffffffffff, 0x0) r4 = gettid() syz_open_procfs$namespace(r4, &(0x7f0000000480)='ns/cgroup\x00') fsopen(&(0x7f0000000100)='affs\x00', 0x1) 8.060887035s ago: executing program 1 (id=158): userfaultfd(0x801) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0x40}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x9436, 0x0, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c86, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 7.570287303s ago: executing program 0 (id=159): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1], 0x44}}, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r2, 0x400452c8, &(0x7f0000000100)) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(0x0, r3, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c9, &(0x7f0000000100)) 6.723717029s ago: executing program 0 (id=161): unshare(0x2000400) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x6, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r1, &(0x7f00000002c0), 0x0, 0x20004004) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) ioctl$XFS_IOC_START_COMMIT(r1, 0x80585882, &(0x7f0000000080)={0xffffffffffffffff}) openat(r2, &(0x7f0000000100)='./file0\x00', 0x331800, 0x120) r3 = socket$kcm(0xa, 0x2, 0x0) r4 = socket(0x2, 0x80805, 0x0) utimensat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', &(0x7f00000002c0)={{0x0, 0x3fffffff}}, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'team_slave_1\x00', 0x0}) connect$can_bcm(r4, &(0x7f0000000240)={0x1d, r6}, 0x10) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010105, 0x4e20, 0x3, 'lblcr\x00', 0x30, 0x660f5380, 0x3}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000440)={{0x84, @broadcast, 0x4f29, 0x3, 'dh\x00', 0x5, 0xc, 0x6c}, {@rand_addr=0x64010101, 0x4e23, 0x10002, 0x1, 0x1}}, 0x44) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0xe0, @dev={0xfe, 0x80, '\x00', 0xfd}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 6.347143616s ago: executing program 4 (id=162): socket$inet(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2136dbec, 0x800001000089}, 0x0) syz_emit_ethernet(0xd8, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) pselect6(0x40, &(0x7f0000000100)={0x9, 0x2, 0xfffffffffffffffe, 0x1, 0x8, 0x0, 0x20000000000000}, 0x0, 0x0, &(0x7f0000000280), 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r3, 0x84, 0x80, &(0x7f0000000000)=""/4087, &(0x7f0000001040)=0xff7) r4 = syz_create_resource$binfmt(&(0x7f0000000000)='./file1\x00') write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000100)='\b', 0x1) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040)='\t', 0x27) close(0xffffffffffffffff) execveat$binfmt(0xffffffffffffff9c, r4, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write(r5, &(0x7f0000000080)='4', 0x1) 5.034441049s ago: executing program 4 (id=163): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000007c0)={'xfrm0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$sg(0x0, 0x2, 0x200000) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) 4.985937635s ago: executing program 3 (id=164): unshare(0x2000400) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x6, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r1, &(0x7f00000002c0), 0x0, 0x20004004) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) ioctl$XFS_IOC_START_COMMIT(r1, 0x80585882, &(0x7f0000000080)={0xffffffffffffffff}) openat(r2, &(0x7f0000000100)='./file0\x00', 0x331800, 0x120) r3 = socket$kcm(0xa, 0x2, 0x0) r4 = socket(0x2, 0x80805, 0x0) utimensat(0xffffffffffffff9c, 0x0, &(0x7f00000002c0)={{0x0, 0x3fffffff}}, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'team_slave_1\x00', 0x0}) connect$can_bcm(r4, &(0x7f0000000240)={0x1d, r6}, 0x10) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010105, 0x4e20, 0x3, 'lblcr\x00', 0x30, 0x660f5380, 0x3}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000440)={{0x84, @broadcast, 0x4f29, 0x3, 'dh\x00', 0x5, 0xc, 0x6c}, {@rand_addr=0x64010101, 0x4e23, 0x10002, 0x1, 0x1}}, 0x44) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0xe0, @dev={0xfe, 0x80, '\x00', 0xfd}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 3.179063908s ago: executing program 4 (id=165): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}], 0x58}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c86, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 3.155355439s ago: executing program 2 (id=166): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) 2.814090855s ago: executing program 3 (id=167): r0 = socket(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000007c0)="7800000018002502b9409b02ffff48000203be04020406050a08040c5c000900580004000a0000000d0085a168d0bf46d32345653600648d270005000a00000049935ade4a460c89b6ec0cff3959547f509058ba86c902007a00", 0x5a, 0x0, 0x0, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000003c0)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0xbbd25b33d864198e, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r4, &(0x7f0000000880)="723a732f70202e2f66696c65303a300c257e858054d731b2b72d0849e986da55ec26f9a5ef422a361934e770f5ae8b6feec32162daa559a68255c18c0741145fcaf8e4d471040cadda4d1332ed0d25", 0x4f) syz_open_dev$tty1(0xc, 0x4, 0x1) setsockopt$WPAN_WANTLQI(r2, 0x0, 0x3, &(0x7f0000000100), 0x4) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a00590214f9f407000904101f00000000000000000200000800040001000000", 0x24) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f00000000c0)=0x8000) ioctl$TIOCVHANGUP(r1, 0x5437, 0x2) 2.783947303s ago: executing program 4 (id=168): r0 = io_uring_setup(0x1b54, &(0x7f0000000100)={0x0, 0x1d49, 0x400, 0x4, 0x3d8}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x800000}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) userfaultfd(0x1) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bind$inet6(r5, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r5, &(0x7f00000003c0)="a6", 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) r6 = syz_open_dev$radio(&(0x7f0000000500), 0x3, 0x2) ioctl$VIDIOC_G_MODULATOR(r6, 0xc0445636, &(0x7f0000000540)={0x6, "9e58dca567d4404ef94f54652acb330ec0aabc93cd0dd92d6960273c928540d0", 0x800, 0x5, 0x8e, 0x0, 0x1}) sendto$inet(r1, &(0x7f0000000040)="24e1d6a219c4a881", 0x8, 0x20008005, &(0x7f00000000c0)={0x2, 0x4e21, @loopback}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 2.404583085s ago: executing program 1 (id=169): sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {{}, {}, {0xc, 0x14, 'syz0\x00'}}}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x10) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x35, 0x0, 0x1}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000eb0626f50000000000080000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x4fa, &(0x7f0000000cc0)=""/4096, 0x40f00, 0x5, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0x2, 0x4, 0x9}, 0x1, 0x0, 0x0, 0x64, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xd4}, 0x94) 1.639237723s ago: executing program 4 (id=170): io_uring_setup(0x1b54, &(0x7f0000000100)={0x0, 0x1d49, 0x400, 0x4, 0x3d8}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x800000}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) userfaultfd(0x1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r4, &(0x7f00000003c0)="a6", 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) r5 = syz_open_dev$radio(&(0x7f0000000500), 0x3, 0x2) ioctl$VIDIOC_G_MODULATOR(r5, 0xc0445636, &(0x7f0000000540)={0x6, "9e58dca567d4404ef94f54652acb330ec0aabc93cd0dd92d6960273c928540d0", 0x800, 0x5, 0x8e, 0x0, 0x1}) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000040)="24e1d6a219c4a881", 0x8, 0x20008005, &(0x7f00000000c0)={0x2, 0x4e21, @loopback}, 0x10) syz_open_dev$sndpcmp(&(0x7f0000000340), 0x0, 0x0) 1.364702359s ago: executing program 2 (id=171): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r1 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB], 0x44}}, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r2, 0x400452c8, &(0x7f0000000100)) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(0x0, r3, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c9, &(0x7f0000000100)) 419.003308ms ago: executing program 4 (id=172): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x2, @empty}, 0x1c) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x1, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40054}, 0xc010) shutdown(r0, 0x1) 204.12074ms ago: executing program 3 (id=173): socket$inet(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2136dbec, 0x800001000089}, 0x0) syz_emit_ethernet(0xd8, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) pselect6(0x40, &(0x7f0000000100)={0x9, 0x2, 0xfffffffffffffffe, 0x1, 0x8, 0x0, 0x20000000000000}, 0x0, 0x0, &(0x7f0000000280), 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r3, 0x84, 0x80, &(0x7f0000000000)=""/4087, &(0x7f0000001040)=0xff7) r4 = syz_create_resource$binfmt(&(0x7f0000000000)='./file1\x00') write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000100)='\b', 0x1) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040)='\t', 0x27) close(0xffffffffffffffff) execveat$binfmt(0xffffffffffffff9c, r4, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write(r5, &(0x7f0000000080)='4', 0x1) 163.092643ms ago: executing program 1 (id=174): syz_open_dev$video4linux(&(0x7f0000000000), 0x2eb, 0x282) syz_emit_ethernet(0x9a, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000e10000000000000008004a00008c00000000001190787f0000010a010101071374e0000001ac1414aaffffffff000000000000004e2000649078020000000000000000000000fdcdae25a7a296872a27fe90e48e30acf8afc7e67d70a62c979cefa10a0028bdae0000"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/cpu1/online\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='0', 0x1) write(r0, &(0x7f00000001a0)='1', 0x1) 0s ago: executing program 2 (id=175): r0 = socket(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000007c0)="7800000018002502b9409b02ffff48000203be04020406050a08040c5c000900580004000a0000000d0085a168d0bf46d32345653600648d270005000a00000049935ade4a460c89b6ec0cff3959547f509058ba86c902007a00", 0x5a, 0x0, 0x0, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000003c0)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0xbbd25b33d864198e, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r4, &(0x7f0000000880)="723a732f70202e2f66696c65303a300c257e858054d731b2b72d0849e986da55ec26f9a5ef422a361934e770f5ae8b6feec32162daa559a68255c18c0741145fcaf8e4d471040cadda4d1332ed0d25", 0x4f) syz_open_dev$tty1(0xc, 0x4, 0x1) setsockopt$WPAN_WANTLQI(r2, 0x0, 0x3, &(0x7f0000000100), 0x4) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a00590214f9f407000904101f00000000000000000200000800040001000000", 0x24) ioctl$TIOCVHANGUP(r1, 0x5437, 0x2) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.49' (ED25519) to the list of known hosts. [ 79.395827][ T5574] cgroup: Unknown subsys name 'net' [ 79.625776][ T5574] cgroup: Unknown subsys name 'cpuset' [ 79.671420][ T5574] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 81.420867][ T5574] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 84.045497][ T5599] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 84.066723][ T5600] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.077238][ T5600] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 84.093816][ T5600] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 84.097203][ T5601] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 84.129692][ T5601] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.134919][ T5600] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 84.144508][ T5601] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 84.154643][ T5601] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 84.156945][ T5607] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 84.161164][ T5601] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 84.161676][ T5601] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 84.164806][ T5601] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 84.175792][ T59] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 84.177693][ T59] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 84.198945][ T5606] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 84.221602][ T59] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 84.224944][ T59] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 84.226657][ T59] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 84.240914][ T5593] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 84.254226][ T5593] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 84.258995][ T5593] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 84.266944][ T5593] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 84.282307][ T59] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 84.310738][ T5601] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.293905][ T5601] Bluetooth: hci3: command tx timeout [ 86.300590][ T5601] Bluetooth: hci1: command tx timeout [ 86.380753][ T5601] Bluetooth: hci2: command tx timeout [ 86.450643][ T5601] Bluetooth: hci4: command tx timeout [ 86.460585][ T5601] Bluetooth: hci0: command tx timeout [ 86.756726][ T5590] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.758142][ T5590] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.758361][ T5590] bridge_slave_0: entered allmulticast mode [ 86.761645][ T5590] bridge_slave_0: entered promiscuous mode [ 86.802874][ T5589] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.803027][ T5589] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.803185][ T5589] bridge_slave_0: entered allmulticast mode [ 86.805722][ T5589] bridge_slave_0: entered promiscuous mode [ 86.810081][ T5588] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.810186][ T5588] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.810337][ T5588] bridge_slave_0: entered allmulticast mode [ 86.815477][ T5588] bridge_slave_0: entered promiscuous mode [ 86.818495][ T5590] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.818619][ T5590] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.818836][ T5590] bridge_slave_1: entered allmulticast mode [ 86.823298][ T5590] bridge_slave_1: entered promiscuous mode [ 86.872945][ T5589] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.873062][ T5589] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.873210][ T5589] bridge_slave_1: entered allmulticast mode [ 86.876552][ T5589] bridge_slave_1: entered promiscuous mode [ 86.878607][ T5588] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.878726][ T5588] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.878867][ T5588] bridge_slave_1: entered allmulticast mode [ 86.882825][ T5588] bridge_slave_1: entered promiscuous mode [ 86.904658][ T5586] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.904780][ T5586] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.905267][ T5586] bridge_slave_0: entered allmulticast mode [ 86.907974][ T5586] bridge_slave_0: entered promiscuous mode [ 86.909900][ T5585] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.910013][ T5585] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.912148][ T5585] bridge_slave_0: entered allmulticast mode [ 86.915463][ T5585] bridge_slave_0: entered promiscuous mode [ 87.033748][ T893] cfg80211: failed to load regulatory.db [ 87.047707][ T5586] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.049024][ T5586] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.049207][ T5586] bridge_slave_1: entered allmulticast mode [ 87.052366][ T5586] bridge_slave_1: entered promiscuous mode [ 87.054417][ T5585] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.054529][ T5585] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.054668][ T5585] bridge_slave_1: entered allmulticast mode [ 87.065877][ T5585] bridge_slave_1: entered promiscuous mode [ 87.137927][ T5590] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.195799][ T5589] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.201125][ T5588] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.227796][ T5590] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.258397][ T5589] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.262346][ T5588] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.283198][ T5586] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.292075][ T5585] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.336460][ T5586] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.339914][ T5585] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.374412][ T5590] team0: Port device team_slave_0 added [ 87.404411][ T5589] team0: Port device team_slave_0 added [ 87.408803][ T5588] team0: Port device team_slave_0 added [ 87.413421][ T5590] team0: Port device team_slave_1 added [ 87.442325][ T5589] team0: Port device team_slave_1 added [ 87.445099][ T5588] team0: Port device team_slave_1 added [ 87.463562][ T5586] team0: Port device team_slave_0 added [ 87.467166][ T5585] team0: Port device team_slave_0 added [ 87.509189][ T5586] team0: Port device team_slave_1 added [ 87.514780][ T5585] team0: Port device team_slave_1 added [ 87.543157][ T5590] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.543220][ T5590] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.543241][ T5590] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.600105][ T5589] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.607857][ T5589] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.607887][ T5589] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.609398][ T5588] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.609411][ T5588] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.609434][ T5588] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.614515][ T5590] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.614530][ T5590] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.614552][ T5590] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.657111][ T5589] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.657125][ T5589] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.657148][ T5589] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.663708][ T5588] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.663723][ T5588] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.663747][ T5588] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.683408][ T5586] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.683422][ T5586] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.683444][ T5586] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.687047][ T5585] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.687062][ T5585] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.687084][ T5585] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.727310][ T5586] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.727325][ T5586] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.727347][ T5586] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.729313][ T5585] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.729342][ T5585] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.729364][ T5585] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.897612][ T5590] hsr_slave_0: entered promiscuous mode [ 87.899228][ T5590] hsr_slave_1: entered promiscuous mode [ 87.954086][ T5589] hsr_slave_0: entered promiscuous mode [ 87.955374][ T5589] hsr_slave_1: entered promiscuous mode [ 87.956382][ T5589] debugfs: 'hsr0' already exists in 'hsr' [ 87.956514][ T5589] Cannot create hsr debugfs directory [ 87.991361][ T5588] hsr_slave_0: entered promiscuous mode [ 87.999551][ T5588] hsr_slave_1: entered promiscuous mode [ 88.003336][ T5588] debugfs: 'hsr0' already exists in 'hsr' [ 88.003361][ T5588] Cannot create hsr debugfs directory [ 88.057330][ T5586] hsr_slave_0: entered promiscuous mode [ 88.059690][ T5586] hsr_slave_1: entered promiscuous mode [ 88.062427][ T5586] debugfs: 'hsr0' already exists in 'hsr' [ 88.062453][ T5586] Cannot create hsr debugfs directory [ 88.073807][ T5585] hsr_slave_0: entered promiscuous mode [ 88.075049][ T5585] hsr_slave_1: entered promiscuous mode [ 88.076035][ T5585] debugfs: 'hsr0' already exists in 'hsr' [ 88.076058][ T5585] Cannot create hsr debugfs directory [ 88.370740][ T4902] Bluetooth: hci3: command tx timeout [ 88.370751][ T5601] Bluetooth: hci1: command tx timeout [ 88.450659][ T4902] Bluetooth: hci2: command tx timeout [ 88.531582][ T4902] Bluetooth: hci0: command tx timeout [ 88.531614][ T5601] Bluetooth: hci4: command tx timeout [ 89.231057][ T5590] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 89.281022][ T5590] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 89.290284][ T5590] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 89.334585][ T5590] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 89.339822][ T5590] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 89.366588][ T5590] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 89.384730][ T5590] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 89.414212][ T5590] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 89.525216][ T5588] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 89.557529][ T5588] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 89.565639][ T5588] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 89.594520][ T5588] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 89.597840][ T5588] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 89.635447][ T5588] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 89.678394][ T5588] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 89.704769][ T5588] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 89.837591][ T5589] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 89.865452][ T5589] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 89.875808][ T5589] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 89.896327][ T5589] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 89.909511][ T5589] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 89.938335][ T5589] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 89.962991][ T5589] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 89.983774][ T5589] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 90.125319][ T5585] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 90.165201][ T5585] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 90.175264][ T5585] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 90.218395][ T5585] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 90.229100][ T5585] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 90.264066][ T5585] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 90.294808][ T5585] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 90.334235][ T5585] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 90.392714][ T5590] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.452050][ T5601] Bluetooth: hci1: command tx timeout [ 90.460640][ T5601] Bluetooth: hci3: command tx timeout [ 90.487872][ T5586] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 90.518446][ T5586] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 90.531199][ T5601] Bluetooth: hci2: command tx timeout [ 90.542417][ T5586] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 90.574673][ T5586] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 90.588168][ T5586] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 90.610679][ T5601] Bluetooth: hci0: command tx timeout [ 90.610752][ T5601] Bluetooth: hci4: command tx timeout [ 90.624516][ T5586] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 90.632915][ T5586] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 90.665288][ T5586] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 90.675831][ T5590] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.738884][ T2934] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.739488][ T2934] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.789651][ T5588] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.802895][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.813721][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.901517][ T5588] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.945598][ T1217] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.946977][ T1217] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.976023][ T5589] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.999155][ T2934] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.999324][ T2934] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.091511][ T5589] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.150041][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.151820][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.184884][ T5585] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.209337][ T1217] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.209607][ T1217] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.320278][ T5585] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.368331][ T5586] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.473246][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.476329][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.548664][ T1217] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.548837][ T1217] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.587742][ T5586] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.693477][ T1217] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.694763][ T1217] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.723222][ T1217] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.723455][ T1217] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.186273][ T5590] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.530593][ T4902] Bluetooth: hci3: command tx timeout [ 92.530657][ T5601] Bluetooth: hci1: command tx timeout [ 92.596830][ T5588] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.610745][ T4902] Bluetooth: hci2: command tx timeout [ 92.634416][ T5590] veth0_vlan: entered promiscuous mode [ 92.692117][ T4902] Bluetooth: hci4: command tx timeout [ 92.692178][ T5601] Bluetooth: hci0: command tx timeout [ 92.767830][ T5590] veth1_vlan: entered promiscuous mode [ 92.952471][ T5589] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.069028][ T5588] veth0_vlan: entered promiscuous mode [ 93.072721][ T5590] veth0_macvtap: entered promiscuous mode [ 93.114431][ T5590] veth1_macvtap: entered promiscuous mode [ 93.198184][ T5588] veth1_vlan: entered promiscuous mode [ 93.231580][ T5590] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.315784][ T5590] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.325171][ T5589] veth0_vlan: entered promiscuous mode [ 93.335148][ T5585] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.353067][ T5586] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.424979][ T5589] veth1_vlan: entered promiscuous mode [ 93.633480][ T5588] veth0_macvtap: entered promiscuous mode [ 93.775687][ T5588] veth1_macvtap: entered promiscuous mode [ 93.915941][ T5589] veth0_macvtap: entered promiscuous mode [ 93.969293][ T5588] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.013468][ T5589] veth1_macvtap: entered promiscuous mode [ 94.021988][ T5586] veth0_vlan: entered promiscuous mode [ 94.046430][ T5588] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.069750][ T1217] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.076209][ T1217] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.139419][ T5586] veth1_vlan: entered promiscuous mode [ 94.187840][ T5585] veth0_vlan: entered promiscuous mode [ 94.201332][ T5589] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.257740][ T72] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.266264][ T72] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.284795][ T5589] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.370197][ T5585] veth1_vlan: entered promiscuous mode [ 94.844534][ T5590] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 94.908211][ T5586] veth0_macvtap: entered promiscuous mode [ 94.924052][ T72] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.924136][ T72] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.083071][ T5586] veth1_macvtap: entered promiscuous mode [ 95.140330][ T5585] veth0_macvtap: entered promiscuous mode [ 95.281148][ T5585] veth1_macvtap: entered promiscuous mode [ 95.372879][ T1471] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.372958][ T1471] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.410350][ T5586] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.454520][ T1471] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.454592][ T1471] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.475392][ T5586] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.544487][ T5585] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.896078][ T5585] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.928075][ T1471] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.942294][ T1471] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.137415][ T1003] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 97.330682][ T1003] usb 1-1: Using ep0 maxpacket: 8 [ 97.340298][ T1003] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 97.402346][ T1003] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.744215][ T1003] pvrusb2: Hardware description: Terratec Grabster AV400 [ 97.746452][ T1003] pvrusb2: ********** [ 97.746463][ T1003] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 97.746474][ T1003] pvrusb2: Important functionality might not be entirely working. [ 97.746482][ T1003] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 97.746492][ T1003] pvrusb2: ********** [ 98.128941][ T2377] pvrusb2: Invalid write control endpoint [ 98.217062][ T5793] smpboot: CPU 1 is now offline [ 98.370866][ T2377] pvrusb2: Invalid write control endpoint [ 98.370878][ T2377] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 98.370883][ T2377] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 98.370887][ T2377] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 98.370895][ T2377] pvrusb2: Device being rendered inoperable [ 98.395898][ T2377] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 98.395946][ T2377] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 98.464586][ T5595] usb 1-1: USB disconnect, device number 2 [ 98.503114][ T2377] pvrusb2: Attached sub-driver cx25840 [ 98.503127][ T2377] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 98.503132][ T2377] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 98.768285][ T5795] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 98.932333][ T1217] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.940274][ T1217] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.962091][ T1471] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.331363][ T10] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 99.465763][ T72] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.465828][ T72] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.591186][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 99.597959][ T10] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 99.600068][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.862004][ T10] pvrusb2: Hardware description: Terratec Grabster AV400 [ 99.880597][ T10] pvrusb2: ********** [ 99.880609][ T10] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 99.880621][ T10] pvrusb2: Important functionality might not be entirely working. [ 99.880630][ T10] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 99.880642][ T10] pvrusb2: ********** [ 99.934444][ T5321] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 100.054127][ T1180] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.056365][ T1180] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.068153][ T2377] pvrusb2: Invalid write control endpoint [ 100.130834][ T5321] usb 3-1: Using ep0 maxpacket: 8 [ 100.141580][ T5321] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 100.188453][ T5321] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.252191][ T5321] pvrusb2: Hardware description: Terratec Grabster AV400 [ 100.259361][ T5321] pvrusb2: ********** [ 100.259373][ T5321] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 100.259384][ T5321] pvrusb2: Important functionality might not be entirely working. [ 100.259392][ T5321] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 100.259402][ T5321] pvrusb2: ********** [ 100.337974][ T5800] pvrusb2: Invalid write control endpoint [ 100.536643][ T2377] pvrusb2: Invalid write control endpoint [ 100.548881][ T2377] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 100.548895][ T2377] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 100.548902][ T2377] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 100.548909][ T2377] pvrusb2: Device being rendered inoperable [ 100.548943][ T2377] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 100.548994][ T2377] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 100.595458][ T1003] usb 4-1: USB disconnect, device number 2 [ 100.658154][ T2377] pvrusb2: Attached sub-driver cx25840 [ 100.678060][ T2377] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 100.678076][ T2377] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 100.678101][ T2377] pvrusb2: Invalid write control endpoint [ 100.911202][ T71] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.912029][ T71] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.017520][ T5728] usb 3-1: USB disconnect, device number 2 [ 101.019112][ T71] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.044476][ T71] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.106438][ T2377] pvrusb2: Invalid write control endpoint [ 101.106505][ T2377] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 101.106513][ T2377] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 101.106520][ T2377] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 101.106527][ T2377] pvrusb2: Device being rendered inoperable [ 101.106556][ T2377] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 101.106606][ T2377] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 101.177613][ T2377] pvrusb2: Attached sub-driver cx25840 [ 101.177628][ T2377] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 101.177636][ T2377] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 101.491272][ T1427] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.502979][ T71] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.503248][ T71] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.503642][ T71] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.503825][ T71] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.503997][ T71] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.126382][ T71] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.146940][ T40] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.293778][ T68] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.644230][ T1217] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.911845][ T1217] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.912100][ T1217] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.035225][ T5836] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 103.248316][ T71] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.250006][ T71] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.250343][ T71] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.250377][ T71] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.250406][ T71] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.106777][ T5847] usb usb8: usbfs: process 5847 (syz.2.15) did not claim interface 0 before use [ 104.539761][ T31] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 104.700566][ T31] usb 1-1: Using ep0 maxpacket: 8 [ 104.707520][ T31] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 104.720293][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.924189][ T31] pvrusb2: Hardware description: Terratec Grabster AV400 [ 104.931336][ T31] pvrusb2: ********** [ 104.931347][ T31] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 104.931359][ T31] pvrusb2: Important functionality might not be entirely working. [ 104.931368][ T31] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 104.931385][ T31] pvrusb2: ********** [ 105.065932][ T2377] pvrusb2: Invalid write control endpoint [ 105.271837][ T2377] pvrusb2: Invalid write control endpoint [ 105.278519][ T2377] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 105.278533][ T2377] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 105.278540][ T2377] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 105.278548][ T2377] pvrusb2: Device being rendered inoperable [ 105.278642][ T2377] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 105.278705][ T2377] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 105.325860][ T5843] pvrusb2: Attempted to execute control transfer when device not ok [ 105.392533][ T893] usb 1-1: USB disconnect, device number 3 [ 105.406274][ T2377] pvrusb2: Attached sub-driver cx25840 [ 105.406344][ T2377] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 105.406353][ T2377] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 106.054307][ T5850] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 106.067688][ T5850] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 106.260167][ T5850] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 106.345861][ T5850] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 106.346030][ T5850] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 106.544193][ T5850] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 106.784207][ T5850] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 106.797155][ T5850] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 107.831092][ T5850] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 108.113699][ T5850] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 108.130761][ T4902] Bluetooth: hci1: command 0x0c1a tx timeout [ 108.137600][ T5850] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 108.437476][ T4902] Bluetooth: hci2: command 0x0c1a tx timeout [ 108.545558][ T5850] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 108.851509][ T4902] Bluetooth: hci3: command 0x0c1a tx timeout [ 108.961058][ T5728] usb 4-1: new low-speed USB device number 3 using dummy_hcd [ 109.148589][ T5728] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 109.161764][ T5728] usb 4-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 109.172423][ T5728] usb 4-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 109.196550][ T5728] usb 4-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 109.207132][ T5728] usb 4-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 109.222507][ T5728] usb 4-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 109.226363][ T5728] usb 4-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 109.255223][ T5728] usb 4-1: string descriptor 0 read error: -22 [ 109.257195][ T5728] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.463072][ T5904] usb usb8: usbfs: process 5904 (syz.0.28) did not claim interface 0 before use [ 110.141333][ T4902] Bluetooth: hci4: command 0x0c1a tx timeout [ 110.211691][ T4902] Bluetooth: hci1: command 0x0c1a tx timeout [ 110.388768][ T5728] usb 4-1: can't set config #168, error -71 [ 110.445166][ T5728] usb 4-1: USB disconnect, device number 3 [ 110.451536][ T4902] Bluetooth: hci2: command 0x0c1a tx timeout [ 110.946864][ T4902] Bluetooth: hci3: command 0x0c1a tx timeout [ 112.312413][ T4902] Bluetooth: hci4: command 0x0c1a tx timeout [ 112.323381][ T5601] Bluetooth: hci1: command 0x0c1a tx timeout [ 112.909778][ T5321] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 113.137935][ T4902] Bluetooth: hci2: command 0x0c1a tx timeout [ 113.160615][ T5321] usb 4-1: Using ep0 maxpacket: 8 [ 113.168016][ T4902] Bluetooth: hci3: command 0x0c1a tx timeout [ 113.169526][ T5321] usb 4-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 113.238144][ T5321] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.246240][ T5321] usb 4-1: Product: syz [ 113.246261][ T5321] usb 4-1: Manufacturer: syz [ 113.246274][ T5321] usb 4-1: SerialNumber: syz [ 113.369252][ T5321] usb 4-1: config 0 descriptor?? [ 113.440598][ T5884] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 113.459550][ T5321] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 113.467638][ T5321] pctv452e: pctv452e_power_ctrl: 1 [ 113.467638][ T5321] [ 113.489023][ T5321] usb 4-1: selecting invalid altsetting 3 [ 113.494885][ T5321] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 113.494885][ T5321] [ 113.506227][ T5321] dvb-usb: bulk message failed: -22 (5/0) [ 113.701652][ T5884] usb 5-1: Using ep0 maxpacket: 8 [ 113.707898][ T5884] usb 5-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 113.785590][ T5931] Zero length message leads to an empty skb [ 114.412527][ T4902] Bluetooth: hci4: command 0x0c1a tx timeout [ 114.681397][ T5915] dvb-usb: bulk message failed: -22 (7/0) [ 114.733880][ T5915] pctv452e: I2C error -22; AA 01 00 00 00 -> aa 01 31 03 00 00 00 [ 114.745504][ T5884] usb 5-1: string descriptor 0 read error: -71 [ 114.745639][ T5884] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.763372][ T5321] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 114.823164][ T5321] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 114.852243][ T5884] usb 5-1: config 0 descriptor?? [ 114.852846][ T5884] usb 5-1: can't set config #0, error -71 [ 114.871865][ T5321] usb 4-1: media controller created [ 115.103877][ T5884] usb 5-1: USB disconnect, device number 2 [ 115.132799][ T5321] dvb-usb: bulk message failed: -22 (8/0) [ 115.132823][ T5321] pctv452e: I2C error -22; AA 02 A0 01 14 -> aa 02 31 04 a0 01 14 [ 115.132943][ T5321] dvb-usb: MAC address reading failed. [ 115.895220][ T5321] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 116.078237][ T5935] binder: 5934:5935 ioctl 4018620d 0 returned -22 [ 116.205176][ T5950] usb usb8: usbfs: process 5950 (syz.4.41) did not claim interface 0 before use [ 116.741816][ T5321] DVB: Unable to find symbol stb0899_attach() [ 116.748038][ T5321] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 117.023822][ T5321] rc_core: IR keymap rc-tt-1500 not found [ 117.024383][ T5321] Registered IR keymap rc-empty [ 117.154418][ T5321] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 117.272672][ T5321] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input5 [ 117.299582][ T72] IPVS: starting estimator thread 0... [ 117.356020][ T5321] dvb-usb: schedule remote query interval to 100 msecs. [ 117.368626][ T5321] pctv452e: pctv452e_power_ctrl: 0 [ 117.368626][ T5321] [ 117.368647][ T5321] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 117.417563][ T5321] usb 4-1: USB disconnect, device number 4 [ 117.432900][ T5969] IPVS: using max 11 ests per chain, 26400 per kthread [ 117.489901][ T5884] dvb-usb: bulk message failed: -22 (4/0) [ 117.504388][ T5884] dvb-usb: error -22 while querying for an remote control event. [ 118.082745][ T5884] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 118.212617][ T5321] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 118.272586][ T5884] usb 5-1: Using ep0 maxpacket: 8 [ 118.280373][ T5884] usb 5-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 118.344354][ T5884] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.350552][ T5884] usb 5-1: Product: syz [ 118.350572][ T5884] usb 5-1: Manufacturer: syz [ 118.350585][ T5884] usb 5-1: SerialNumber: syz [ 118.465813][ T5884] usb 5-1: config 0 descriptor?? [ 118.479220][ T5884] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 118.479263][ T5884] pctv452e: pctv452e_power_ctrl: 1 [ 118.479263][ T5884] [ 118.479303][ T5884] usb 5-1: selecting invalid altsetting 3 [ 118.479316][ T5884] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 118.479316][ T5884] [ 118.479330][ T5884] dvb-usb: bulk message failed: -22 (5/0) [ 118.547952][ T5884] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 118.724862][ T5321] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 120.805109][ T5321] usb 4-1: device descriptor read/all, error -71 [ 121.113197][ T5884] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 121.181497][ T5884] usb 5-1: media controller created [ 121.181553][ T5884] dvb-usb: bulk message failed: -22 (8/0) [ 121.181567][ T5884] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 121.181616][ T5884] dvb-usb: MAC address reading failed. [ 121.379508][ T5884] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 121.539889][ T5884] DVB: Unable to find symbol stb0899_attach() [ 121.539906][ T5884] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 121.631448][ T5884] rc_core: IR keymap rc-tt-1500 not found [ 121.637321][ T5884] Registered IR keymap rc-empty [ 121.721421][ T5884] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 121.790087][ T5884] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input6 [ 121.845460][ T5884] dvb-usb: schedule remote query interval to 100 msecs. [ 121.859383][ T5884] pctv452e: pctv452e_power_ctrl: 0 [ 121.859383][ T5884] [ 121.859399][ T5884] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 121.972368][ T6012] usb usb8: usbfs: process 6012 (syz.4.55) did not claim interface 0 before use [ 122.467749][ T9] dvb-usb: bulk message failed: -22 (4/0) [ 122.507926][ T9] dvb-usb: error -22 while querying for an remote control event. [ 122.525103][ T5884] usb 5-1: USB disconnect, device number 3 [ 123.036158][ T5884] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 123.203657][ T6003] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 123.209913][ T6003] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 123.210107][ T6003] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 123.210291][ T6003] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 123.601116][ T5884] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 123.777536][ T5884] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 123.793220][ T5884] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 123.800566][ T5884] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 123.815146][ T5884] usb 5-1: New USB device strings: Mfr=0, Product=28, SerialNumber=3 [ 123.820523][ T5884] usb 5-1: Product: syz [ 123.820542][ T5884] usb 5-1: SerialNumber: syz [ 123.846281][ T5884] usb 5-1: config 0 descriptor?? [ 123.965871][ T6026] syz.3.59 (6026) used greatest stack depth: 19328 bytes left [ 124.206632][ T31] usb 5-1: USB disconnect, device number 4 [ 125.192950][ T6035] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 125.451306][ T4902] Bluetooth: hci4: command 0x0c1a tx timeout [ 125.451397][ T4902] Bluetooth: hci3: command 0x0c1a tx timeout [ 125.451426][ T4902] Bluetooth: hci2: command 0x0c1a tx timeout [ 125.451453][ T4902] Bluetooth: hci1: command 0x0c1a tx timeout [ 127.101115][ T72] IPVS: starting estimator thread 0... [ 127.210617][ T6067] IPVS: using max 8 ests per chain, 19200 per kthread [ 129.250522][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 129.260477][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 129.270479][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 129.280480][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 129.290461][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 131.660475][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 131.670489][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 131.680478][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 131.690471][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 131.700468][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 133.105621][ T1332] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.124322][ T1332] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.969935][ T6099] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 133.970015][ T6099] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 133.970067][ T6099] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 133.982099][ T6099] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 134.015352][ T6099] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 135.294837][ T6108] usb usb8: usbfs: process 6108 (syz.3.82) did not claim interface 0 before use [ 137.402335][ T6110] siw: device registration error -23 [ 143.680664][ T6132] siw: device registration error -23 [ 145.058391][ T6142] usb usb8: usbfs: process 6142 (syz.0.95) did not claim interface 0 before use [ 147.831658][ T1427] IPVS: starting estimator thread 0... [ 147.920631][ T6150] IPVS: using max 9 ests per chain, 21600 per kthread [ 149.668137][ T6152] Bluetooth: MGMT ver 1.23 [ 151.551690][ T6170] siw: device registration error -23 [ 152.945245][ T6176] siw: device registration error -23 [ 154.000121][ T6178] netlink: 20 bytes leftover after parsing attributes in process `syz.1.105'. [ 154.291353][ T37] audit: type=1326 audit(1788719295.073:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6179 comm="syz.1.106" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe528e3e159 code=0x0 [ 154.653293][ T6186] usb usb8: usbfs: process 6186 (syz.4.107) did not claim interface 0 before use [ 155.806110][ T70] IPVS: starting estimator thread 0... [ 155.900729][ T6200] IPVS: using max 9 ests per chain, 21600 per kthread [ 159.841200][ T6227] netlink: 32 bytes leftover after parsing attributes in process `syz.4.115'. [ 160.714161][ T6235] netlink: 20 bytes leftover after parsing attributes in process `syz.2.117'. [ 161.132581][ T6242] usb usb8: usbfs: process 6242 (syz.1.119) did not claim interface 0 before use [ 165.798330][ T6265] siw: device registration error -23 [ 166.521959][ T6255] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 177.789568][ T6308] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 181.235419][ T5601] Bluetooth: hci4: Malformed Event: 0x2f [ 183.451662][ T2934] IPVS: starting estimator thread 0... [ 183.541354][ T6353] IPVS: using max 15 ests per chain, 36000 per kthread [ 194.396456][ T1332] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.396612][ T1332] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.475768][ T6433] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 194.696287][ T27] [ 194.698659][ T27] ====================================================== [ 194.705681][ T27] WARNING: possible circular locking dependency detected [ 194.712742][ T27] syzkaller #0 Not tainted [ 194.717175][ T27] ------------------------------------------------------ [ 194.724200][ T27] migration/1/27 is trying to acquire lock: [ 194.730283][ T27] ffff8880b8740998 (_T->lock){....}-{2:2}, at: rt_spin_trylock+0x56/0x2b0 [ 194.738840][ T27] [ 194.738840][ T27] but task is already holding lock: [ 194.746276][ T27] ffff88801df78b00 (&p->pi_lock){-...}-{2:2}, at: __balance_push_cpu_stop+0x78/0x410 [ 194.756001][ T27] [ 194.756001][ T27] which lock already depends on the new lock. [ 194.756001][ T27] [ 194.766655][ T27] [ 194.766655][ T27] the existing dependency chain (in reverse order) is: [ 194.775736][ T27] [ 194.775736][ T27] -> #1 (&p->pi_lock){-...}-{2:2}: [ 194.783035][ T27] _raw_spin_lock+0x2e/0x40 [ 194.788225][ T27] rtlock_slowlock_locked+0x1ec/0x3c20 [ 194.794188][ T27] rt_spin_lock+0x165/0x400 [ 194.799206][ T27] finish_wait+0xbe/0x1e0 [ 194.804043][ T27] synchronize_rcu_expedited+0x63e/0x770 [ 194.810271][ T27] try_check_zero+0x2c1/0x4c0 [ 194.815571][ T27] process_srcu+0x148/0x16f0 [ 194.820666][ T27] process_scheduled_works+0xc3d/0x1630 [ 194.826809][ T27] worker_thread+0xa47/0xfb0 [ 194.831910][ T27] kthread+0x38b/0x470 [ 194.836486][ T27] ret_from_fork+0x514/0xb70 [ 194.841670][ T27] ret_from_fork_asm+0x1a/0x30 [ 194.846939][ T27] [ 194.846939][ T27] -> #0 (_T->lock){....}-{2:2}: [ 194.853971][ T27] __lock_acquire+0x15ff/0x2e40 [ 194.859332][ T27] lock_acquire+0x115/0x350 [ 194.864345][ T27] _raw_spin_lock_irqsave+0x40/0x60 [ 194.870061][ T27] rt_spin_trylock+0x56/0x2b0 [ 194.875332][ T27] __kfree_rcu_sheaf+0xd3/0x620 [ 194.880690][ T27] kvfree_call_rcu+0xa4/0x430 [ 194.885968][ T27] set_cpus_allowed_force+0x1bd/0x2a0 [ 194.892026][ T27] cpuset_cpus_allowed_fallback+0x24a/0x370 [ 194.898440][ T27] select_fallback_rq+0x11e/0x200 [ 194.903970][ T27] __balance_push_cpu_stop+0xa1/0x410 [ 194.909851][ T27] cpu_stopper_thread+0x25e/0x3f0 [ 194.915385][ T27] smpboot_thread_fn+0x565/0xa70 [ 194.920841][ T27] kthread+0x38b/0x470 [ 194.925418][ T27] ret_from_fork+0x514/0xb70 [ 194.930512][ T27] ret_from_fork_asm+0x1a/0x30 [ 194.935777][ T27] [ 194.935777][ T27] other info that might help us debug this: [ 194.935777][ T27] [ 194.945993][ T27] Possible unsafe locking scenario: [ 194.945993][ T27] [ 194.953550][ T27] CPU0 CPU1 [ 194.958916][ T27] ---- ---- [ 194.964274][ T27] lock(&p->pi_lock); [ 194.968335][ T27] lock(_T->lock); [ 194.974737][ T27] lock(&p->pi_lock); [ 194.981346][ T27] lock(_T->lock); [ 194.985140][ T27] [ 194.985140][ T27] *** DEADLOCK *** [ 194.985140][ T27] [ 194.993268][ T27] locks held by migration/1/27: 2, last CPU#1: [ 194.999406][ T27] #0: ffff88801df78b00 (&p->pi_lock){-...}-{2:2}, at: __balance_push_cpu_stop+0x78/0x410 [ 195.009318][ T27] #1: ffffffff8e1c3ac0 (rcu_read_lock){....}-{1:3}, at: cpuset_cpus_allowed_fallback+0x22/0x370 [ 195.019840][ T27] [ 195.019840][ T27] stack backtrace: [ 195.025736][ T27] CPU: 1 UID: 0 PID: 27 Comm: migration/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 195.035441][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 195.045484][ T27] Stopper: __balance_push_cpu_stop+0x0/0x410 <- balance_push+0x28d/0x4f0 [ 195.053962][ T27] Call Trace: [ 195.057251][ T27] [ 195.060169][ T27] dump_stack_lvl+0xe8/0x150 [ 195.064752][ T27] print_circular_bug+0x2e2/0x300 [ 195.069769][ T27] check_noncircular+0x12f/0x150 [ 195.074698][ T27] __lock_acquire+0x15ff/0x2e40 [ 195.079542][ T27] ? __asan_memset+0x22/0x50 [ 195.084124][ T27] ? __enqueue_entity+0x30a/0xc60 [ 195.089143][ T27] lock_acquire+0x115/0x350 [ 195.093639][ T27] ? rt_spin_trylock+0x56/0x2b0 [ 195.098485][ T27] ? enqueue_task_fair+0x1560/0x1b60 [ 195.103784][ T27] _raw_spin_lock_irqsave+0x40/0x60 [ 195.108978][ T27] ? rt_spin_trylock+0x56/0x2b0 [ 195.113829][ T27] rt_spin_trylock+0x56/0x2b0 [ 195.118505][ T27] __kfree_rcu_sheaf+0xd3/0x620 [ 195.123353][ T27] kvfree_call_rcu+0xa4/0x430 [ 195.128020][ T27] ? do_raw_spin_unlock+0xf5/0x200 [ 195.133120][ T27] set_cpus_allowed_force+0x1bd/0x2a0 [ 195.138490][ T27] ? __pfx_set_cpus_allowed_force+0x10/0x10 [ 195.144378][ T27] ? cpuset_cpus_allowed_fallback+0x22/0x370 [ 195.150353][ T27] cpuset_cpus_allowed_fallback+0x24a/0x370 [ 195.156243][ T27] select_fallback_rq+0x11e/0x200 [ 195.161256][ T27] ? __pfx___balance_push_cpu_stop+0x10/0x10 [ 195.167225][ T27] __balance_push_cpu_stop+0xa1/0x410 [ 195.172587][ T27] ? _raw_spin_unlock_irq+0x23/0x50 [ 195.177780][ T27] ? __pfx___balance_push_cpu_stop+0x10/0x10 [ 195.183836][ T27] cpu_stopper_thread+0x25e/0x3f0 [ 195.188855][ T27] ? smpboot_thread_fn+0x4e/0xa70 [ 195.193913][ T27] smpboot_thread_fn+0x565/0xa70 [ 195.198850][ T27] ? smpboot_thread_fn+0x4e/0xa70 [ 195.203866][ T27] kthread+0x38b/0x470 [ 195.207956][ T27] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 195.213408][ T27] ? __pfx_kthread+0x10/0x10 [ 195.217983][ T27] ret_from_fork+0x514/0xb70 [ 195.222560][ T27] ? __pfx_ret_from_fork+0x10/0x10 [ 195.227659][ T27] ? __switch_to+0xc89/0x1420 [ 195.232333][ T27] ? __pfx_kthread+0x10/0x10 [ 195.236918][ T27] ret_from_fork_asm+0x1a/0x30 [ 195.241735][ T27] [ 195.244792][ T27] process 6394 (syz.0.161) no longer affine to cpu1 [ 195.970651][ T27] numa_remove_cpu cpu 1 node 0: mask now 0 [ 195.970677][ T27] numa_remove_cpu cpu 1 node 1: mask now 0 [ 195.974004][ T6437] smpboot: CPU 1 is now offline [ 197.851685][ T6438] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 197.852580][ T0] numa_add_cpu cpu 1 node 0: mask now 0-1 [ 197.852602][ T0] numa_add_cpu cpu 1 node 1: mask now 0-1