last executing test programs: 4m43.114591071s ago: executing program 32 (id=373): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/hibernate_compression_threads', 0x200200, 0x18c) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000080)}) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000a00), r1) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000000)={0x68, r2, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {0x0, 0x4107}, {0x4c, 0x18, {0x40, @media='eth\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000010}, 0x4040) r3 = socket$packet(0x11, 0x3, 0x300) r4 = syz_open_dev$vcsn(&(0x7f0000000000), 0x1, 0x1) write$UHID_INPUT(r4, &(0x7f0000000d00)={0x8, {"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", 0x1000}}, 0x1006) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000140)=0x9) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r3, &(0x7f00000005c0)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x8, r6, 0x14}, 0x80, &(0x7f0000004c40)=[{&(0x7f0000000300)="43e5", 0x2}], 0x1}}], 0x1, 0x20000081) bind$x25(r5, &(0x7f0000000080)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}}, 0x12) 4m9.080733769s ago: executing program 33 (id=446): r0 = socket$kcm(0x1e, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000040)=""/59, 0x3b}], 0x1}, 0x40000180) close(r0) r1 = socket$kcm(0x1e, 0x4, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004800)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELTABLE={0x90, 0x2, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_TABLE_USERDATA={0x61, 0x6, "946024968e1a1712fb0889442b6f8a0b358323a82d9d2050744d45be81f49a0fa06ee6d97eb1fcd4bb7391bf432ec3b851f9ede9c3b7d9deba726f8bea4e3c1ae84590d04e52b25dd097e755f75a5b3a82996770501ba3f61be6a8fa87"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELCHAIN={0x20, 0x5, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWFLOWTABLE={0x108, 0x16, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK={0xe0, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xffff4a16}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg2\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x200}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'batadv0\x00'}, {0x14, 0x1, 'veth0_to_bridge\x00'}, {0x14, 0x1, 'veth1_to_team\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pim6reg0\x00'}, {0x14, 0x1, 'erspan0\x00'}, {0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'ip6gre0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xfffffffc}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWCHAIN={0x164, 0x3, 0xa, 0x201, 0x0, 0x0, {0xb, 0x0, 0x7}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_USERDATA={0xa5, 0xc, "bcb58aa868678ad4d484b54923b84fb5697e86b84c761c4c07ef145e32645d9bff4d6290172503542afe35a9c3ecae01e42a2eb5280ac48aab9e673e1fb7f9236371891d0471d6ca3fa9e0c961674b9f458b78db879e863859213f0082022a66a63261eac4f8c433eb43cf0dd3e4ec780f7233aef8c17835a221db40d8ffb9b0ac42506fda4543cc4d6259bc6cbe4e96cb43d236340c271a8aa617dffe2f48935d"}, @NFTA_CHAIN_HOOK={0x50, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth0_to_team\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x60f44ca7}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7f3809d8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x75391ab4}]}, @NFTA_CHAIN_COUNTERS={0x4c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x6}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x25d}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x73}]}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0xa}, @NFT_OBJECT_LIMIT=@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}}, @NFT_MSG_DELSETELEM={0x554, 0xe, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x350, 0x3, 0x0, 0x1, [{0x34c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x50, 0x7, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x13}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xa}]}}}, @NFTA_SET_ELEM_KEY={0x2f0, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x29, 0x1, "bb0d8d544303c8d637a481d829c9ddda71553b76e941f51f02f2e7b51a3fc62525db4ec360"}, @NFTA_DATA_VALUE={0x35, 0x1, "8e292ec425b239909bdd75b7f4458c2b1334e9902bcd65d2618efc5c5bff18f94e9b9cddfc7d90da941bf01cd99caa02df"}, @NFTA_DATA_VALUE={0xd5, 0x1, "b7959c41db5b87b23791b23872b1c385b142c6c5e3d10fff46baf3812d5182211702c463b6859a582fcdc6b275e0f4e56f222a4ab639627d9d9d0e68bf4c379d762df155db36281c6447099a772006bb2aaa54c71a5e60725950d551db06efe970fefaffeae540b823f524d116fc01e9061914ffc70f1abbddc6ef818a9a1785613a97c5a724115a1d22236cd472c4daced5365aa2a0655035897cf7729630d7fd1289810e26e3e51dd136e1bb389459724ec9726d9649d68416c2b3831f3babc53f7b8b6717e4af6974fedfc1362fbec9"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VALUE={0xe5, 0x1, "17338e37172f23b8abdecf834e3ca7a74c73037d3a4f99f66fa7d23d2ddff74921d0e28074286563701d2ba1036b5d3e09f0f634ffde7a4c9e9f2e50ba9e3ae79ecd281b90179e7b47d6f02874fda0b230acb2353cf7f7e9ea18afc2dee45978bf550138e09bd44fdca2faf5ee449c15d92a2c1eb546ad557863695114461d0c2fdb0837bbdb3acffa28fa39455554f7379554bfe80c6480c552d5f70ebf279cc34b4c2193b64ae5aa5de36c0134c610f3e5b32c2e83e6a1dcf81a218edcc6db05f9221fff9f05420a014598538054eb9923536c0ef5b6e0ae790aa814a793f85a"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1cc, 0x3, 0x0, 0x1, [{0x1c4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_DATA={0x140, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0x25, 0x1, "71c92cae9b3b550cf7b1f9336a9fa5d3db035a6d869a1a339af600b45413106708"}, @NFTA_DATA_VALUE={0xa5, 0x1, "2e7b7c09181e498e2fc183fa0d4f44d5678c6028f3f0f62c7d961da6a6cf9db7af1a2656c389a545df998e44398475769ab7c496eec91e7403e894ec953c6f8af2d6558e105bc868c8d317a55e55f0a3c72b8392bfa6a10804450c7b1472ff2a327a6ad512faf6917415ee456b56df2b82530b9f84381fb4485dad718b98f6f2e01043c4ea5558422d04872ac923417c2f155b01a158963ddf1ecbc4abe34d5a9a"}, @NFTA_DATA_VALUE={0x31, 0x1, "8b4b6d9c7e9342f82436d33ac6bef41c0b715b5d68823aff8300e9d1c42a461c2e9e026c5a6fb78112977387d9"}]}, @NFTA_SET_ELEM_KEY_END={0x38, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7fffffffffffffff}, @NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_KEY_END={0x1c, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x4}]}, {0x4}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x8b8}, 0x1, 0x0, 0x0, 0x80}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x88003) capset(&(0x7f0000000040)={0x19980330}, 0x0) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000040)=0x85) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[], 0xfdef) 2m23.162713475s ago: executing program 34 (id=714): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f00000000c0)=0x1000, 0x4) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x8000000}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = open_tree(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x8801) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={0x1, 0xffffffffffffffff}, 0x4) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001700)={0x18, 0x11, &(0x7f0000001500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, {}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x6}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000015c0)='syzkaller\x00', 0xe, 0x31, &(0x7f0000001600)=""/49, 0x40f00, 0xc6159e7333f35ae, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001640)={0x5, 0x5, 0x1dd, 0x8}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000001680)=[r3, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000016c0)=[{0x1, 0x4, 0xb, 0x6}, {0x0, 0x5, 0x1, 0x6}, {0x2, 0x3, 0x5, 0x1}], 0x10, 0x1ff}, 0x94) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000017c0)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000001800)=@base={0x7, 0x2f, 0x3, 0x6, 0xb0, 0x1, 0x40, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1}, 0x50) r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="030000000400000bd0d1a3000a000000000000005490eb4a1cf07f7e33ad547a486b4fbf876c064f2c4acdd156c02274cdef8cc290af45178f8d20d2a90236eee91c5e30b4a13814ff5a49d0f3c85c84b60dd9b7c2c507fb9a181f47bc01c57315338638627a19b2f998227ce6e335da79aee45914920ae502fa81f1b96cbe810ef42a7b352ff97405b7d9eddfa1514edc59b1ea1d98396977597643abf7eb0dbeef90889ec461e56b7c131d3db511f0742699fad6170582b84685aa22", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYRES32=r9, @ANYRES32=r11, @ANYRESDEC=r12], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001940)={0x19, 0x16, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@jmp={0x5, 0x1, 0x2, 0x5, 0x7, 0x0, 0x8}, @jmp={0x5, 0x1, 0xb, 0x5, 0x3, 0x40, 0x8}, @map_fd={0x18, 0x8, 0x1, 0x0, r6}, @alu={0x7, 0x1, 0xc, 0x5, 0x8, 0xc, 0x10}, @map_fd={0x18, 0x6, 0x1, 0x0, r7}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000480)='GPL\x00', 0x3bd, 0x1000, &(0x7f00000004c0)=""/4096, 0x61800, 0x18, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x8, &(0x7f00000014c0)={0x5, 0x4}, 0x8, 0x10, 0xfffffffffffffffe, 0x0, 0x0, r8, 0x5, &(0x7f0000001880)=[r9, r10, r11], &(0x7f00000018c0)=[{0x1, 0x2, 0x9, 0x7}, {0x5, 0x4, 0x3, 0xb}, {0x3, 0x2, 0x5, 0x3}, {0x0, 0x3, 0x1, 0x7}, {0x3, 0x3, 0xd, 0x2}], 0x10, 0x7f}, 0x94) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000003c0)={[0x5, 0x1000000000, 0x5, 0x7fffffffffffffff, 0x80000003, 0x3, 0x2004d0, 0x0, 0xa19, 0x8, 0x5, 0x0, 0x3, 0x2, 0x5, 0x8000000000], 0x10000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000100)={{0xfec00000, 0x64000, 0x9, 0x7, 0xff, 0x10, 0x80, 0x7, 0x0, 0x8, 0x2, 0x10}, {0x8080000, 0x10000, 0x10, 0x5, 0x2, 0x0, 0xfd, 0xfe, 0x7, 0xff}, {0xb000, 0x25000, 0xf, 0x0, 0x27, 0xc4, 0x0, 0x0, 0x7, 0x3, 0x40, 0x3}, {0xdddd0fff, 0x33331000, 0x18592cbc7c573fc6, 0x9, 0x1, 0x9, 0x9, 0x7, 0x8, 0xf, 0x4}, {0x80a0000, 0xeeee8000, 0xb, 0x0, 0xfe, 0x6, 0x0, 0x80, 0x8, 0x3f, 0x6}, {0xb000, 0x30000, 0x9, 0x76, 0x2, 0x1, 0x2, 0x82, 0x0, 0xd, 0x6, 0x40}, {0xeeee8000, 0xeeee8000, 0x9, 0x4, 0x3, 0x0, 0xa2, 0x20, 0x0, 0x0, 0x41, 0xc}, {0x80a0000, 0x50000, 0xc, 0x8b, 0x0, 0x66, 0x9, 0x40, 0x26, 0xf, 0x4, 0x2}, {0x4000, 0x8cc}, {0xdddd1000, 0x43}, 0xddf8ffd3, 0x0, 0xddd8d000, 0x110, 0x7, 0xf801, 0x3000, [0x80000004, 0x0, 0x10000, 0x7f]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r13 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r13}, &(0x7f0000bbdffc)=0x0) sched_getaffinity(r13, 0x0, 0x0) timer_settime(r14, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x6}, @hci_rp_read_voice_setting={{0x5}, {0x0, 0xaa5}}}}, 0x9) r15 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r15, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x100, {0x0, 0x0, 0x0, 0x0, {0xe, 0x1}}}, 0x24}}, 0x4) 2m21.383597881s ago: executing program 4 (id=753): r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @hyper}, 0x10) sched_setscheduler(0x0, 0x2, 0x0) symlinkat(&(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) syz_open_dev$usbfs(&(0x7f0000000000), 0x76, 0x40702) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x3c, &(0x7f0000000000)={0x0, 0x0}, 0x10) 2m20.214584761s ago: executing program 4 (id=755): syz_usb_connect(0x0, 0x24, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, 0x0, 0x0) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x1c) 2m18.5796321s ago: executing program 35 (id=729): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x18000000000002a0, 0xe40, 0x0, &(0x7f00000002c0)="f6eb094549002060009b8538a4ba", 0x0, 0x806, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000800000000000070000000900010073797a30000000007c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d38001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c000280080001400000000808000340000001"], 0xc4}}, 0x20050890) r2 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) uname(0xfffffffffffffffc) r4 = getpid() sched_setscheduler(r4, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r5, 0x2, &(0x7f0000000000)=0x80000000000003) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000640), 0x0) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80000) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xfc, "2af01c3d0040fbffffffffffffff00"}) r7 = syz_open_pts(r3, 0x107e00) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020100020e000000000000000000000005000500000000000a004e240000000700000000000000000000ffffac14140a0100000000000000050006006c0000000a004e2000001800fc010000000000000000000000000000060000000000000002001000000004d6000004d4d1650000"], 0x70}}, 0x4004040) ioctl$TIOCSTI(r7, 0x5412, &(0x7f00000000c0)) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x14c, 0x10, 0x713, 0x70bd2a, 0x24dfdbfe, {{@in=@loopback, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x102, 0xa, 0x0, 0x0, 0x1d}, {@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0xfe, 0x32}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, {0x0, 0x0, 0xfffffffffffffffd, 0x8, 0x0, 0x9, 0x0, 0x543}, {0x4, 0x7fffffffffffffff}, {0x2}, 0x70bd2e, 0x3500, 0x2, 0x4, 0x0, 0x50}, [@algo_aead={0x5a, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x70, 0x60, "210466d38547aa140db9a2000000"}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) 2m17.068082127s ago: executing program 36 (id=736): inotify_init() (async) r0 = inotify_init() syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0xfe, 0x7fff0006}]}) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa8203, 0x0) (async) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa8203, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000080)={0x20004, r2, 0x2}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000440)={0x0, 0x0, r4}) (async) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000440)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x59, 0x1}) close_range(r2, r0, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r1, 0xc01c64a3, &(0x7f0000000280)={0x1, r5, 0xff, 0x100007, 0xa, 0x1ff, 0x1}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r8, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r8, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) (async) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r8, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(r8, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r8, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x70, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x88002, 0x0) (async) r9 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x88002, 0x0) r10 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r9, &(0x7f0000000040)={0xc0002009}) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r11 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r11, 0x5423, &(0x7f0000000040)=0xd) ioctl$TIOCSETD(r11, 0x5423, &(0x7f00000000c0)=0x1) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newlink={0x28, 0x10, 0x1, 0x70bd2b, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x40810}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4004) (async) sendmsg$nl_route(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newlink={0x28, 0x10, 0x1, 0x70bd2b, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x40810}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4004) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r8, 0x84, 0x77, &(0x7f00000003c0)={0x0, 0x3}, 0x8) (async) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r8, 0x84, 0x77, &(0x7f00000003c0)={0x0, 0x3}, 0x8) socket$alg(0x26, 0x5, 0x0) close(0x3) 2m17.059049803s ago: executing program 4 (id=761): ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000240)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000100), 0x0}, {[0x3, 0x3, 0x8, 0x5]}, 0x8, 0x8b, &(0x7f0000000180)=""/139}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0x1}, "02"}}, 0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x48, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x801a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_emit_ethernet(0x7a, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd61a7000200442f00fe8000000000000000000000000000bbfe80000000000000000000000000008a0c2088be0000000201009900000086dd080088be000000031c0885140100000000007b40080022eb0000000223022309020000008000000300ebb41b"], 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r3, 0x4068aea3, &(0x7f00000002c0)={0xc0, 0x0, 0x4000}) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000200)={0x0, 0x1, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = dup(r4) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000040)=@x86={0x20, 0x9, 0x8, 0x0, 0x6, 0x1, 0x86, 0x6, 0x1, 0x0, 0x2, 0x4, 0x0, 0x7, 0x8004, 0xa, 0x5, 0xff, 0x3f, '\x00', 0x8, 0x7ffffffffffffffe}) ioctl$KVM_SET_VAPIC_ADDR(r5, 0x4008ae93, &(0x7f00000000c0)=0xffff) ioctl$KVM_RUN(r5, 0xae80, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x82002, 0x0) 2m16.732208596s ago: executing program 3 (id=762): socket$inet_icmp_raw(0x2, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) getpgid(r1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x20, 0x2, 0x2, 0x201, 0x0, 0x0, {0x2, 0x0, 0x5}, [@CTA_EXPECT_HELP_NAME={0xb, 0x6, 'amanda\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x6000, 0x77b) openat(0xffffffffffffff9c, 0x0, 0xc0042, 0x1) 2m14.683312703s ago: executing program 3 (id=763): openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2482, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b000000000000"], 0x50) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xd, &(0x7f00000004c0)=ANY=[], &(0x7f0000000680)='syzkaller\x00', 0xffffff7f}, 0x94) r1 = syz_open_dev$dri(&(0x7f0000000c00), 0x1ff, 0x80800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$sock_TIOCINQ(r3, 0x541b, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) setrlimit(0x40000000000008, &(0x7f0000000000)={0x4848, 0xfffffffffffff006}) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r6, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(r6, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) sendmmsg$inet6(r6, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)='B', 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000840)}], 0x1}}], 0x3, 0x404c444) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5}) ioctl$DRM_IOCTL_MODE_GETENCODER(r1, 0xc01464a6, &(0x7f0000000100)={r7}) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='net\x00') getdents64(r8, &(0x7f0000000fc0)=""/224, 0xe0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed36760ab3967b761f972", 0x0, 0x2efd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) 2m12.708032658s ago: executing program 3 (id=764): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$video4linux(0x0, 0x7fff, 0x48b03) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000dc0)={0x38, 0x5, 0x8, 0x9, 0x0, 0x9, 0x0, 0xaa, 0xfa11, 0xffffffff}, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r3, 0x0, 0x0, 0x0) shutdown(r3, 0x1) close(r2) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x2) r4 = getpid() socket$inet6_sctp(0xa, 0x5, 0x84) sched_setattr(r4, &(0x7f0000000340)={0x38, 0x6, 0x1000002d, 0x12000, 0x299c0, 0x7, 0x395400000000000, 0x2, 0x3, 0x5507}, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) r6 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) r7 = fcntl$dupfd(r6, 0x0, r6) write$binfmt_script(r7, 0x0, 0x0) write$binfmt_script(r7, &(0x7f0000001b00), 0xfffffd9d) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x54, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x54}}, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x3a, &(0x7f0000000980)=ANY=[], 0x0) sendmsg$IPSET_CMD_DESTROY(r9, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000000306010400000000000000000200e704050001000700000030692b5aebac0cd17186e7779be9ab9e218cc6ca0af0bd83226a6865a9f66727"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) 2m1.858176686s ago: executing program 37 (id=761): ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000240)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000100), 0x0}, {[0x3, 0x3, 0x8, 0x5]}, 0x8, 0x8b, &(0x7f0000000180)=""/139}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0x1}, "02"}}, 0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x48, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x801a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_emit_ethernet(0x7a, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd61a7000200442f00fe8000000000000000000000000000bbfe80000000000000000000000000008a0c2088be0000000201009900000086dd080088be000000031c0885140100000000007b40080022eb0000000223022309020000008000000300ebb41b"], 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r3, 0x4068aea3, &(0x7f00000002c0)={0xc0, 0x0, 0x4000}) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000200)={0x0, 0x1, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = dup(r4) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000040)=@x86={0x20, 0x9, 0x8, 0x0, 0x6, 0x1, 0x86, 0x6, 0x1, 0x0, 0x2, 0x4, 0x0, 0x7, 0x8004, 0xa, 0x5, 0xff, 0x3f, '\x00', 0x8, 0x7ffffffffffffffe}) ioctl$KVM_SET_VAPIC_ADDR(r5, 0x4008ae93, &(0x7f00000000c0)=0xffff) ioctl$KVM_RUN(r5, 0xae80, 0x0) writev(r1, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x82002, 0x0) 1m57.087418896s ago: executing program 38 (id=764): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$video4linux(0x0, 0x7fff, 0x48b03) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000dc0)={0x38, 0x5, 0x8, 0x9, 0x0, 0x9, 0x0, 0xaa, 0xfa11, 0xffffffff}, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r3, 0x0, 0x0, 0x0) shutdown(r3, 0x1) close(r2) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x2) r4 = getpid() socket$inet6_sctp(0xa, 0x5, 0x84) sched_setattr(r4, &(0x7f0000000340)={0x38, 0x6, 0x1000002d, 0x12000, 0x299c0, 0x7, 0x395400000000000, 0x2, 0x3, 0x5507}, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) r6 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) r7 = fcntl$dupfd(r6, 0x0, r6) write$binfmt_script(r7, 0x0, 0x0) write$binfmt_script(r7, &(0x7f0000001b00), 0xfffffd9d) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x54, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x54}}, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x3a, &(0x7f0000000980)=ANY=[], 0x0) sendmsg$IPSET_CMD_DESTROY(r9, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000000306010400000000000000000200e704050001000700000030692b5aebac0cd17186e7779be9ab9e218cc6ca0af0bd83226a6865a9f66727"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) 1m54.402912664s ago: executing program 39 (id=766): r0 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101080, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_open_procfs(0x0, &(0x7f0000000440)='net/rt6_stats\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000000)=0x200000000) write$vhost_msg_v2(r2, 0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f00000000c0)={0x84, @multicast2, 0x4e22, 0x3, 'none\x00', 0x1e, 0x4, 0x6a}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x3b, @rand_addr=0x64010101, 0x4e21, 0x3, 'lc\x00', 0x11, 0x3240, 0x3d}, {@loopback, 0x4e23, 0x10000, 0x8628, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_DELDEST(r4, 0x0, 0x488, &(0x7f0000000280)={{0x84, @empty, 0x4e20, 0x3, 'lblc\x00', 0x1d, 0x2, 0x2a}, {@loopback, 0x4e23, 0x10000, 0xc24, 0x9, 0xfffffffc}}, 0x44) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000140)={'8255\x00', [0x3, 0xfffffffc, 0x5, 0x4, 0x2f, 0xfffffff7, 0x8001, 0xa22, 0xfffffff8, 0x2, 0xfffffffc, 0xc3, 0x5006, 0x1000007, 0x1, 0x10003, 0x801000, 0x7fffffff, 0x1ff, 0x3ff, 0x1001010, 0x1ff, 0x8, 0x3, 0x8001, 0x7, 0x3ff, 0x5, 0x404, 0x3, 0xfffd]}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2004840}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a00001400028010000b800c0011"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$nl_route(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5400000010000304000000000000000000000420", @ANYRES32=0x0, @ANYBLOB="00030000000000002c0012800b00010062726964676500001c00028008000500010000000500250001000000050029000000000008000a00", @ANYRES32=r7], 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x8954) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r9, 0x0, 0x80, &(0x7f0000000d00)=@nat={'nat\x00', 0x19, 0x1, 0x21e, [0x200000002300, 0x0, 0x0, 0x2000000024be, 0x2000000024ee], 0x20, 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff01000000051100006b0000000016636169663000000000000000e3ff00007665746831000000000000000000000073797a5f74756e0039da0000f8ff0000000076657468310000000000000000001000aaaaaaaaaa3d000000ff00000180c2000003ff00ffffff00ae000000560100008e0100006f776e6572000000000000000000000000000000000000000000000000000000180000000000", @ANYRES32, @ANYRES32, @ANYRES32=0xee00, @ANYRES32, @ANYBLOB="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"]}, 0x296) 1m50.533377506s ago: executing program 40 (id=771): r0 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101080, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_open_procfs(0x0, &(0x7f0000000440)='net/rt6_stats\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000000)=0x200000000) write$vhost_msg_v2(r2, 0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f00000000c0)={0x84, @multicast2, 0x4e22, 0x3, 'none\x00', 0x1e, 0x4, 0x6a}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x3b, @rand_addr=0x64010101, 0x4e21, 0x3, 'lc\x00', 0x11, 0x3240, 0x3d}, {@loopback, 0x4e23, 0x10000, 0x8628, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_DELDEST(r4, 0x0, 0x488, &(0x7f0000000280)={{0x84, @empty, 0x4e20, 0x3, 'lblc\x00', 0x1d, 0x2, 0x2a}, {@loopback, 0x4e23, 0x10000, 0xc24, 0x9, 0xfffffffc}}, 0x44) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000140)={'8255\x00', [0x3, 0xfffffffc, 0x5, 0x4, 0x2f, 0xfffffff7, 0x8001, 0xa22, 0xfffffff8, 0x2, 0xfffffffc, 0xc3, 0x5006, 0x1000007, 0x1, 0x10003, 0x801000, 0x7fffffff, 0x1ff, 0x3ff, 0x1001010, 0x1ff, 0x8, 0x3, 0x8001, 0x7, 0x3ff, 0x5, 0x404, 0x3, 0xfffd]}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2004840}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a00001400028010000b800c0011"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$nl_route(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5400000010000304000000000000000000000420", @ANYRES32=0x0, @ANYBLOB="00030000000000002c0012800b00010062726964676500001c00028008000500010000000500250001000000050029000000000008000a00", @ANYRES32=r7], 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x8954) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r9, 0x0, 0x80, &(0x7f0000000d00)=@nat={'nat\x00', 0x19, 0x1, 0x21e, [0x200000002300, 0x0, 0x0, 0x2000000024be, 0x2000000024ee], 0x20, 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff01000000051100006b0000000016636169663000000000000000e3ff00007665746831000000000000000000000073797a5f74756e0039da0000f8ff0000000076657468310000000000000000001000aaaaaaaaaa3d000000ff00000180c2000003ff00ffffff00ae000000560100008e0100006f776e6572000000000000000000000000000000000000000000000000000000180000000000", @ANYRES32, @ANYRES32, @ANYRES32=0xee00, @ANYRES32, @ANYBLOB="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"]}, 0x296) 1m38.341019373s ago: executing program 41 (id=792): r0 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101080, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_open_procfs(0x0, &(0x7f0000000440)='net/rt6_stats\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, 0x0) write$vhost_msg_v2(r2, 0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xe) r4 = socket$inet_sctp(0x2, 0x1, 0x84) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f00000000c0)={0x84, @multicast2, 0x4e22, 0x3, 'none\x00', 0x1e, 0x4, 0x6a}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x3b, @rand_addr=0x64010101, 0x4e21, 0x3, 'lc\x00', 0x11, 0x3240, 0x3d}, {@loopback, 0x4e23, 0x10000, 0x8628, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_DELDEST(r4, 0x0, 0x488, &(0x7f0000000280)={{0x84, @empty, 0x4e20, 0x3, 'lblc\x00', 0x1d, 0x2, 0x2a}, {@loopback, 0x4e23, 0x10000, 0xc24, 0x9, 0xfffffffc}}, 0x44) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000140)={'8255\x00', [0x3, 0xfffffffc, 0x5, 0x4, 0x2f, 0xfffffff7, 0x8001, 0xa22, 0xfffffff8, 0x2, 0xfffffffc, 0xc3, 0x5006, 0x1000007, 0x1, 0x10003, 0x801000, 0x7fffffff, 0x1ff, 0x3ff, 0x1001010, 0x1ff, 0x8, 0x3, 0x8001, 0x7, 0x3ff, 0x5, 0x404, 0x3, 0xfffd]}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2004840}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a00001400028010000b800c0011"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$nl_route(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5400000010000304000000000000000000000420", @ANYRES32=0x0, @ANYBLOB="00030000000000002c0012800b00010062726964676500001c00028008000500010000000500250001000000050029000000000008000a00", @ANYRES32=r7], 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x8954) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r9, 0x0, 0x80, &(0x7f0000000d00)=@nat={'nat\x00', 0x19, 0x1, 0x21e, [0x200000002300, 0x0, 0x0, 0x2000000024be, 0x2000000024ee], 0x20, 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff01000000051100006b0000000016636169663000000000000000e3ff00007665746831000000000000000000000073797a5f74756e0039da0000f8ff0000000076657468310000000000000000001000aaaaaaaaaa3d000000ff00000180c2000003ff00ffffff00ae000000560100008e0100006f776e6572000000000000000000000000000000000000000000000000000000180000000000", @ANYRES32, @ANYRES32, @ANYRES32=0xee00, @ANYRES32, @ANYBLOB="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"]}, 0x296) 1m17.99740874s ago: executing program 5 (id=852): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) listen(r2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffdfffffffffe, 0xfa11, 0xffffffff}, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r4 = accept4(r2, 0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000001800dd8dfdffffff00000006000000000000000101000000060015000300000014001680100018800c0002800800010000000000"], 0x38}}, 0x8840) sendto(r4, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0) recvfrom(r3, &(0x7f00000001c0)=""/62, 0xfeb5, 0x10120, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x4, 0xa4, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYRES64=r5, @ANYRES32=r1, @ANYBLOB="06001500070000000c0016800500080000000000"], 0x38}}, 0x0) 1m17.501189728s ago: executing program 42 (id=830): socket$nl_route(0x10, 0x3, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x100) mkdir(0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x5, 0x0, 0x717e387b, 0x40, "1ae34e060100000000000000b240794233a5bd", 0x4, 0x2}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000004c0), 0x60081, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r2, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) r3 = fsopen(&(0x7f0000000080)='binder\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0x1) fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000300)=0xb3) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000001c0)=0x8) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000380)=0x27) getsockopt$WPAN_SECURITY(r1, 0x0, 0x1, 0x0, &(0x7f00000000c0)) r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000180), 0x11d402, 0x0) sendmsg$TIPC_NL_SOCK_GET(r4, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4000050}, 0x880) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000080), 0x7f03) syz_open_dev$loop(&(0x7f0000000280), 0x1, 0x40040) 1m16.393763433s ago: executing program 5 (id=855): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$video4linux(0x0, 0x7fff, 0x48b03) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000dc0)={0x38, 0x5, 0x8, 0x9, 0x0, 0x9, 0x0, 0xaa, 0xfa11, 0xffffffff}, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r3, 0x0, 0x0, 0x0) shutdown(r3, 0x1) close(r2) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x2) r4 = getpid() socket$inet6_sctp(0xa, 0x5, 0x84) sched_setattr(r4, &(0x7f0000000340)={0x38, 0x6, 0x1000002d, 0x12000, 0x299c0, 0x7, 0x395400000000000, 0x2, 0x3, 0x5507}, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) r6 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) r7 = fcntl$dupfd(r6, 0x0, r6) write$binfmt_script(r7, 0x0, 0x0) write$binfmt_script(r7, &(0x7f0000001b00), 0xfffffd9d) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x54, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x54}}, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x3a, &(0x7f0000000980)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbb359bb6539865fb0d8f60bb06000000000000002c0002000000059078ac1414ff0a0101004402000000014e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='\\\x00\x00\x00'], 0x0) sendmsg$IPSET_CMD_DESTROY(r9, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000000306010400000000000000000200e704050001000700000030692b5aebac0cd17186e7779be9ab9e218cc6ca0af0bd83226a6865a9f66727"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) 1m15.99731189s ago: executing program 43 (id=833): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000016c0)={0x6, 0x8, &(0x7f00000014c0)=@raw=[@printk={@llu, {}, {}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe02}, {}, {}, {0x85, 0x0, 0x0, 0xc7}}], &(0x7f0000001540)='GPL\x00'}, 0x94) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x600000, 0x0) syz_open_dev$video(0x0, 0x81, 0xa082) write(0xffffffffffffffff, &(0x7f0000000000)="240000001100", 0x6) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) syz_open_dev$ttys(0xc, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000240)={0xe18c}, 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x987a3a9f32358a4c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r1, &(0x7f0000000300)=""/102400, 0x19000) socket(0x1e, 0x4, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$unix(0x1, 0x5, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="0c04000010000104000000000000000000480000", @ANYRES32=r2, @ANYBLOB="101000000000000008000d03e8000000e4031680a40001800c0007"], 0x40c}, 0x1, 0x0, 0x0, 0x800}, 0x4800) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = open(&(0x7f0000000080)='./file1\x00', 0x66842, 0x0) pwritev2(r3, &(0x7f0000000240)=[{&(0x7f00000000c0)="8576d44388fce81bf84bf0599e2b3fbbd664066ba957f31f9cae697b196f0c9335dd7c6244fad4f8d3c577b52e51b77fb279aa929e4405dd3907007e54f5b1489c8bbd15e83c4ea57c90171e06790b89290aeea126f0cb330fde5c0622cb6fe9e17ef5e2e8b6eab30baefcdb27425a94754173d986", 0x2c400}], 0x21, 0x7800, 0x0, 0x3) 1m9.472592522s ago: executing program 4 (id=853): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, &(0x7f00000003c0)) socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x11e) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000280)={0xe, "b27c15a55aedfb77b2a54525d566b3b7a48252980dc6c4e6bcabf9952c0fd139"}) syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000190c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x20000000, {0x0, 0xff, 0x2}, 0x1}, 0x18) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x1c) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r4, 0x0, 0x4000808) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) close(r1) 1m8.335515862s ago: executing program 4 (id=861): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_timeval(r3, 0x1, 0x42, &(0x7f0000000080)={0x77359400}, 0xffffffffffffff7e) setsockopt$inet6_tcp_int(r2, 0x6, 0x1e, &(0x7f0000000000)=0x400000001, 0x4) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000180)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) setsockopt$inet6_tcp_int(r2, 0x6, 0x22, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r2, &(0x7f0000000240)={0xa, 0x4e23, 0xa4e4, @remote, 0x3}, 0x1c) sendmmsg(r2, &(0x7f0000001100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4010) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x30, r5, 0x1, 0x170bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x2}]}, 0x30}}, 0x8854) 1m7.76073562s ago: executing program 3 (id=856): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'c6xdigio\x00', [0x0, 0xb, 0x2, 0x1, 0xa, 0x5, 0x7c, 0x3, 0x80008, 0x0, 0x32, 0x2, 0x8, 0x4, 0x80000100, 0x9, 0xfffffffb, 0x3, 0x3, 0x7fffffff, 0x89, 0xca9f, 0xfffffffe, 0x20001e58, 0xffffffff, 0x1ff, 0x8, 0x80, 0xa6b5, 0x0, 0xfffffff8]}) socket$nl_route(0x10, 0x3, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) 1m7.602145215s ago: executing program 3 (id=862): openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2482, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b000000000000"], 0x50) r0 = syz_open_dev$dri(&(0x7f0000000c00), 0x1ff, 0x80800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) setrlimit(0x40000000000008, &(0x7f0000000000)={0x4848, 0xfffffffffffff006}) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r5, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(r5, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) sendmmsg$inet6(r5, 0x0, 0x0, 0x404c444) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net\x00') getdents64(r6, &(0x7f0000000fc0)=""/224, 0xe0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed36760ab3967b761f972", 0x0, 0x2efd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() 1m7.161549954s ago: executing program 4 (id=863): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000000000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000400000)={0x0, &(0x7f0000401000)=[@code={0xa, 0x12, {"f4"}}], 0x12}) ioctl(r3, 0x4048aecb, &(0x7f0000500000)="0100") ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl(r3, 0x4048aecb, &(0x7f0000500100)="070000000000000001000000ffffffff01") sync_file_range(r3, 0xc, 0x1ff, 0x3) r4 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x40) fcntl$setstatus(r4, 0x4, 0x42400) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x5, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x2010, 0xffffffffffffffff, 0xb2570000) socket$inet6_mptcp(0xa, 0x1, 0x106) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setitimer(0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x103, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x13d, 0x0, 0xd6e}}) socket$phonet_pipe(0x23, 0x5, 0x2) r8 = socket$inet(0x2, 0x2, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x48) setsockopt$IPT_SO_SET_REPLACE(r8, 0x4000000000000, 0x40, &(0x7f0000002700)=@raw={'raw\x00', 0x8, 0x3, 0x270, 0x208, 0x8, 0xfa04, 0x0, 0x6c02, 0x208, 0x194, 0x194, 0x208, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x74020000}}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast1, @rand_addr, 0x0, 0x0, 'batadv_slave_0\x00', 'pimreg\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d0) 1m6.640246242s ago: executing program 3 (id=864): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xff, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x2) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) writev(r2, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, &(0x7f0000000240)) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000002c0), 0x0, 0x120, 0x0) modify_ldt$write2(0x11, &(0x7f0000000100)={0xca, 0x0, 0x2000, 0x1}, 0x10) r5 = socket(0x11, 0x3, 0x0) listen(r5, 0x7f) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x48040}, 0x0) ioctl$FBIOGET_CON2FBMAP(r0, 0x460f, &(0x7f00000001c0)={0x37, 0x2}) mknodat(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x81c0, 0xffffffff) timer_create(0x3, &(0x7f0000000100)={0x0, 0x24, 0x2, @thr={&(0x7f0000000040)="6c7f94151eac54b2fb3c69a6ef61a2779d5a8d72f34ec67a4fa7", 0x0}}, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) dup(r7) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) 1m4.477072379s ago: executing program 44 (id=848): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) (async) writev(r0, &(0x7f0000000200)=[{&(0x7f0000001380)="f5", 0x1}], 0x1) (async) r1 = syz_usb_connect(0x2, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="52010000ead4a320d118af1e6309010203010902240001f60720400904a67602ab52634a"], 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f00000000c0)=0x18, 0x4) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000f40)={0x14, 0x0, &(0x7f0000000f00)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async) syz_usb_control_io$hid(r1, &(0x7f0000001240)={0x24, 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="0003020000000203"], 0x0, 0x0}, 0x0) (async) syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f00000003c0)={0x34, &(0x7f0000000000)={0x0, 0x5, 0x2, "80c1"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m1.321021806s ago: executing program 45 (id=855): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$video4linux(0x0, 0x7fff, 0x48b03) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000dc0)={0x38, 0x5, 0x8, 0x9, 0x0, 0x9, 0x0, 0xaa, 0xfa11, 0xffffffff}, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000001000000bfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff000000004e04010000000000d3400202010000004704000001ed00007b130000000000001d440200000000007a0a00fe00ffffffc3030000e1000000b5000000000000009500000000000000023bc065b7a379d17cf9333379fc9e94af69912435f1a864a710aad58db6a6c3692e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c5181554a090f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5be14ecf7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e347a8ad880d2cd829b847400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c35b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af8612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5e69048ddff6da409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03fb8a63e089679216da18ec0ae564162a27afea62d84f3a10746443d64364f50000e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc286463a2b1e992894269f478341d02d0f5ad4bcb524a5a17f48a7382f13d000000225d85ae49cee383dc5049076b98fb6853ab39e415140200000020cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d710b651f898ba749e40bc6980fe78683ac5c0c31030699ddd71063be9261b2e1aab1675b34a22048516d6aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe0e669e5e20100005353193f82ade69d0540059fe6c7fe7cd8697502c7596566d6740300da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc02290beaeb883418f562ae00003ea96d10f172c0374d6eed82641687f3b3a70bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24c87afce829ba0f85da6d8a8f18ea40ab959f6074ab2a4009b9e5f07ab5138aa6e3d37fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0cbe02b6e4114f244a9bf93f04beb72f0861f7580e6b0b384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a9b702cc1b6912a1e717d29135753208160fb04c98375b9cdbae2ed9dc7358f0ebadde0b728fe26e37037f27feeb741680f6f2f9a6a8346962a350845ffa0d829e4f79ad7d87906943408e6df3adbfd03aac93df8866fb010aecfed9092ca4d0f3e1116a0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a530600d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91114a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe92c7719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b1dba94a6ea80c33ead5722c3293986e02c8e0a6dda1eca493f14795bd068826fe8df15efaaeea831555877f958a19e499666a38d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a8784d0899ed888141e2fae6691d1aee1da02ba516467df3e7d1daac19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa57d2c93f49c47944fec01a8aa7749f3187e9efb00000000e0884160b765b07ec9ba020362310223c81e48d6d3b6e5b50d45248efe43a409773e3ed01cd663f3aaab9e1c0000f43b64bb54e5b30be3399e3dd1eb1cfd1935a323023fe5792879833c7eb356b95cfb135045b1d8f7da2fa5bfedef411d0791523a9e64c884e9dfed9cd413afe66bd8ee831cdb34726fe0434fbf44c7b33a853330bcaf37ba4e36705807468b37d32087e599165f1bce015145444ef5967b443222f46173cc876015b2d1874be9846f7c1653c02d2ef9a75fdc45820c69bbe1cb575f9aa21aa9d3d58bd5e5fe026142a72e24049b8400c4a28b2d5db8d5f53cb354fba19975fb0b3739baae51cb4b034993ef1463dcdba2da419b320420efdd091d7f6e83c8ac2ccc6c9392a42a33907421ab847c9590c213eda9a7e1db598a23e75a3c0933fc803ca994a86476b995c37c445f68fd99fb4d335ff00d15bc4630c993fffffe000000000000a236a791bcb6eff8d488041db6b8f2c158c2c3f4baacd0c8cc7eb1fd7fba93237e598771cf6f281aa72139"], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r3, 0x0, 0x0, 0x0) shutdown(r3, 0x1) close(r2) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x2) r4 = getpid() socket$inet6_sctp(0xa, 0x5, 0x84) sched_setattr(r4, &(0x7f0000000340)={0x38, 0x6, 0x1000002d, 0x12000, 0x299c0, 0x7, 0x395400000000000, 0x2, 0x3, 0x5507}, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) r6 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) r7 = fcntl$dupfd(r6, 0x0, r6) write$binfmt_script(r7, 0x0, 0x0) write$binfmt_script(r7, &(0x7f0000001b00), 0xfffffd9d) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x54, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x54}}, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x3a, &(0x7f0000000980)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbb359bb6539865fb0d8f60bb06000000000000002c0002000000059078ac1414ff0a0101004402000000014e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='\\\x00\x00\x00'], 0x0) sendmsg$IPSET_CMD_DESTROY(r9, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000000306010400000000000000000200e704050001000700000030692b5aebac0cd17186e7779be9ab9e218cc6ca0af0bd83226a6865a9f66727"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) 58.463131342s ago: executing program 46 (id=860): r0 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101080, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_open_procfs(0x0, &(0x7f0000000440)='net/rt6_stats\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000000)=0x200000000) write$vhost_msg_v2(r2, 0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xe) r4 = socket$inet_sctp(0x2, 0x1, 0x84) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f00000000c0)={0x84, @multicast2, 0x4e22, 0x3, 'none\x00', 0x1e, 0x4, 0x6a}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, 0x0, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r4, 0x0, 0x488, &(0x7f0000000280)={{0x84, @empty, 0x4e20, 0x3, 'lblc\x00', 0x1d, 0x2, 0x2a}, {@loopback, 0x4e23, 0x10000, 0xc24, 0x9, 0xfffffffc}}, 0x44) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000140)={'8255\x00', [0x3, 0xfffffffc, 0x5, 0x4, 0x2f, 0xfffffff7, 0x8001, 0xa22, 0xfffffff8, 0x2, 0xfffffffc, 0xc3, 0x5006, 0x1000007, 0x1, 0x10003, 0x801000, 0x7fffffff, 0x1ff, 0x3ff, 0x1001010, 0x1ff, 0x8, 0x3, 0x8001, 0x7, 0x3ff, 0x5, 0x404, 0x3, 0xfffd]}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2004840}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a00001400028010000b800c0011"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$nl_route(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5400000010000304000000000000000000000420", @ANYRES32=0x0, @ANYBLOB="00030000000000002c0012800b00010062726964676500001c00028008000500010000000500250001000000050029000000000008000a00", @ANYRES32=r7], 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x8954) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r9, 0x0, 0x80, &(0x7f0000000d00)=@nat={'nat\x00', 0x19, 0x1, 0x21e, [0x200000002300, 0x0, 0x0, 0x2000000024be, 0x2000000024ee], 0x20, 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff01000000051100006b0000000016636169663000000000000000e3ff00007665746831000000000000000000000073797a5f74756e0039da0000f8ff0000000076657468310000000000000000001000aaaaaaaaaa3d000000ff00000180c2000003ff00ffffff00ae000000560100008e0100006f776e6572000000000000000000000000000000000000000000000000000000180000000000", @ANYRES32, @ANYRES32, @ANYRES32=0xee00, @ANYRES32, @ANYBLOB="02040000000000004e464c4f4700000000000000000000000000000000000000000000000000000050000000000000000100000007000300000000005cae641872319dfae5a988272763a36abcf1f74cfd4bf988531a30a528c1c044813d8205fd8b1fdf1c2ccd79b5fb7f9e096fbd1c7eeee4b6646c0b2fc39d3fe20000000072656469726563740000000000000000000000000000000000000000000000000800000000000000feffffff00000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000ffffffffffff0000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff00000000"]}, 0x296) 52.008848463s ago: executing program 47 (id=863): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000000000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000400000)={0x0, &(0x7f0000401000)=[@code={0xa, 0x12, {"f4"}}], 0x12}) ioctl(r3, 0x4048aecb, &(0x7f0000500000)="0100") ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl(r3, 0x4048aecb, &(0x7f0000500100)="070000000000000001000000ffffffff01") sync_file_range(r3, 0xc, 0x1ff, 0x3) r4 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x40) fcntl$setstatus(r4, 0x4, 0x42400) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x5, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x2010, 0xffffffffffffffff, 0xb2570000) socket$inet6_mptcp(0xa, 0x1, 0x106) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setitimer(0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x103, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x13d, 0x0, 0xd6e}}) socket$phonet_pipe(0x23, 0x5, 0x2) r8 = socket$inet(0x2, 0x2, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x48) setsockopt$IPT_SO_SET_REPLACE(r8, 0x4000000000000, 0x40, &(0x7f0000002700)=@raw={'raw\x00', 0x8, 0x3, 0x270, 0x208, 0x8, 0xfa04, 0x0, 0x6c02, 0x208, 0x194, 0x194, 0x208, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x74020000}}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast1, @rand_addr, 0x0, 0x0, 'batadv_slave_0\x00', 'pimreg\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d0) 51.38015455s ago: executing program 48 (id=864): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xff, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x2) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) writev(r2, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, &(0x7f0000000240)) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000002c0), 0x0, 0x120, 0x0) modify_ldt$write2(0x11, &(0x7f0000000100)={0xca, 0x0, 0x2000, 0x1}, 0x10) r5 = socket(0x11, 0x3, 0x0) listen(r5, 0x7f) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x48040}, 0x0) ioctl$FBIOGET_CON2FBMAP(r0, 0x460f, &(0x7f00000001c0)={0x37, 0x2}) mknodat(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x81c0, 0xffffffff) timer_create(0x3, &(0x7f0000000100)={0x0, 0x24, 0x2, @thr={&(0x7f0000000040)="6c7f94151eac54b2fb3c69a6ef61a2779d5a8d72f34ec67a4fa7", 0x0}}, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) dup(r7) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) 40.31615006s ago: executing program 9 (id=903): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000001000010400004000fedbdf2501f80000", @ANYRES32=0x0, @ANYBLOB="01020400000000002800128008000100736974001c00028008000200c6120001060008001900000005000a00fd00000008"], 0x58}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) sendto(r0, 0x0, 0x0, 0x20004008, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x6}]}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r2, &(0x7f0000003240)={0x0, 0x0, &(0x7f0000003200)={&(0x7f00000031c0)={0x10, 0x140c, 0x701, 0x70bd25, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0x880}, 0x40010) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x0, 0x0}, 0x10) 40.303680755s ago: executing program 8 (id=904): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000007c0), r0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x2c, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10}}, 0x74}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(aes)\x00'}, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x8001a0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x200002, 0xa) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) connect$llc(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f7", 0xf4240}], 0x1}], 0x1, 0xf0ff) 39.978995245s ago: executing program 9 (id=906): listen(0xffffffffffffffff, 0x0) 39.670255609s ago: executing program 9 (id=907): mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_tracefs\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) getsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, 0xffffffffffffffff, &(0x7f0000000000)=0xc) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) unshare(0x6a040000) syz_usb_connect$uac2(0x0, 0x8e, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000081e0400304000010203010902"], 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) r5 = socket$igmp6(0xa, 0x3, 0x2) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000140)={@private2={0xfc, 0x2, '\x00', 0x1}, @local, @ipv4={'\x00', '\xff\xff', @local}, 0x3, 0x6, 0x0, 0x500, 0x81, 0x1000000, r7}) setsockopt$EBT_SO_SET_COUNTERS(r4, 0x0, 0x81, &(0x7f0000000200)={'nat\x00', 0x0, 0x0, 0x0, [0xa2, 0xb, 0x4, 0xc, 0x4, 0x6], 0x1, 0x0, 0x0, [{}]}, 0x88) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x58, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4408}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback}, @IFLA_GENEVE_TTL_INHERIT={0x5, 0xc, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000300000064010102000000000000000000000000fc000000000000000000000000000000fffd0000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000002000000000000000000000000000ffffffffffffffefcb0000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000000ae0f000000000000010004030000000044000500fe880000000000000000000000000101ed0000003c"], 0xfc}}, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0xa, 0x4e22, 0x7, @remote, 0x10000}, 0x1c, 0x0, 0x0, 0x0, 0x18}, 0x48814) r9 = openat(0xffffffffffffff9c, &(0x7f0000000400)='my_tracefs/events/task/task_rename/filter\x00', 0x200, 0x0) ioctl$TCSBRKP(r9, 0x5425, 0x10000) write(r9, &(0x7f0000000500)='!o', 0x2) 39.289108411s ago: executing program 8 (id=908): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x204002, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x0, 0x2, 0x4, {0xa, 0x4e20, 0xb, @remote, 0x6}}}, 0x32) socket$kcm(0xa, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x2, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x64) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pread64(0xffffffffffffffff, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='schedstat\x00') preadv(r1, &(0x7f0000000240)=[{0x0}], 0x1, 0x91, 0x2) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000440)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xa2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x1ffffffffffffe, 0x0) read$msr(r2, &(0x7f000004b680)=""/102392, 0x18ff8) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='xfs\x00', 0x808c, 0x0) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x6000, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000340)={0x0, 0x10005}, &(0x7f0000000380)=0x8) r4 = dup2(r3, r3) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000100)={'\x00', 0x42, 0xa, 0x3, 0x40000000, 0x800000000000010}) ioctl$BLKTRACESTART(r3, 0x1274, 0x0) 38.924603025s ago: executing program 8 (id=909): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x204002, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x0, 0x2, 0x4, {0xa, 0x4e20, 0xb, @remote, 0x6}}}, 0x32) socket$kcm(0xa, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x2, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x64) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pread64(0xffffffffffffffff, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='schedstat\x00') preadv(r1, &(0x7f0000000240)=[{0x0}], 0x1, 0x91, 0x2) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000440)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xa2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x1ffffffffffffe, 0x0) read$msr(r2, &(0x7f000004b680)=""/102392, 0x18ff8) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='xfs\x00', 0x808c, 0x0) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x6000, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000340)={0x0, 0x10005}, &(0x7f0000000380)=0x8) r4 = dup2(r3, r3) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000100)={'\x00', 0x42, 0xa, 0x3, 0x40000000, 0x800000000000010}) ioctl$BLKTRACESTART(r3, 0x1274, 0x0) 38.522010271s ago: executing program 8 (id=910): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000007c0), r0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x2c, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10}}, 0x74}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(aes)\x00'}, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001280)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x200002, 0xa) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) 37.728992686s ago: executing program 9 (id=911): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRES16, @ANYRESDEC=0x0, @ANYRESOCT=r1, @ANYRES64=r0]) read$FUSE(r1, &(0x7f00000041c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f000000c280)="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", 0x2000, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0xf, {0x1003, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, {0x0, 0x0, 0x7, 0x6, 0x4, 0x8, 0x0, 0x1002, 0x0, 0x6000, 0x2000, r2}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$nl_xfrm(0x10, 0x3, 0x6) openat$rtc(0xffffffffffffff9c, 0x0, 0x140, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000d80)={{0x0, r2, r3, r2, r3, 0x40, 0x9f00}, 0x0, 0x0, 0xffffffffb14a1d05, 0x3f34f199, 0x414ea6e7, 0x9, 0x100, 0x2, 0x957, 0x0, r4}) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$VFAT_IOCTL_READDIR_SHORT(r5, 0x82307202, &(0x7f0000000880)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) sendmsg$IPCTNL_MSG_CT_DELETE(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000010000)=ANY=[@ANYBLOB="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"], 0x144}}, 0x20000004) r7 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) readv(r7, &(0x7f0000000800)=[{0x0, 0xc8}, {&(0x7f00000004c0)=""/198, 0xc6}], 0x2) fsopen(0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1}) r9 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_QBUF(r9, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x2, 0x4, 0x0, 0x3, {}, {0x0, 0x0, 0x0, 0x0, 0xfd, 0xfe, "8000"}, 0xdf6, 0x2, {}, 0x20800}) ioctl$VIDIOC_REQBUFS(r9, 0xc0145608, &(0x7f0000000100)={0x6, 0x5, 0x4, 0x0, 0x7f}) write$P9_RSTATu(r0, &(0x7f0000000e00)=ANY=[@ANYBLOB="3b0200007d00000005fa000000fbffffff0200000000000000000000000000000000000000000000000000000000000000001f00046e6f6465767b6376666f7825ffffff8102000000000031ffcebc920000003800704a86cec602007dfa67b4a1d8ac9c1fbbc821c744fd2de7d03d3effeb09b5351f5bde054000000000187b8200b500003b595fcb14034354b9fd9ef196a51cd5157adc8106b494e11200cfc213f600000000000000010000000000005e00f8f669fb716dcf315ecaf385409ac65b9408679d2c3b9e1d52c3d6da9bf699fa88dace6cde7ba4a400b4b0b4dbf6c69a69d017cec45906f174a666a8529a451b3407dbdab2884baf050000000000000047ec21cabff20f9c1cbe36f4fd1a2c016f6465762d6eb17b2300f9daa5ee23266ecf85fea65e42d979a3fde5f475daf03b1172d97badc7095afd76fe4f0441f7f7741eac030000ecff0000dba0c2f7f09ff53c7e4d1ad66e2d070198019f30118447aa9a74f51685f506ae894806878267d5a1298d792c4a37f2e1cbbd2482929a0d8972b5cf732ea5b0d723859dba3f93aed3b42ee7cac07de09d1d68a60333a882467d2b31aacdf9188549b1125d6c4c9b18c2fb56c57d7dc626e4390796a1eb48274669ab13f8b11d146059f310e2634d593fec65d529f382066664df244e4c90570a70049f399f061f75b7797ce1fe11ea919609d51a41dd3de304bd7c7ed0a456f0ae12516105c9ce887df5a6e0b6a77d596cf88ba6e5c6397c7d5021d7989528fd1739e1c2d87fff00"/575, @ANYRES32=0x0, @ANYRES32, @ANYRES32=r2], 0x23b) mount$afs(&(0x7f0000000100)=@cell={0x23, '', 'syz1', '.backup'}, &(0x7f0000000180)='./cgroup\x00', &(0x7f00000001c0), 0x1, &(0x7f0000000380)={[{}, {@dyn}]}) 37.540356352s ago: executing program 8 (id=912): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x0, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000170000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x5e}, 0x94) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04", 0x13}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81ffffffffb9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x12f4}, 0x1, 0x0, 0x0, 0x24044010}, 0x0) recvmsg$unix(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000240)=""/54, 0x36}], 0x1}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0xf, 0xb}, {0xffff, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f0000000240)="800000800000210ee7decd7a0003", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r6, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 36.121988937s ago: executing program 9 (id=914): sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x14, 0x3, 0x6, 0x6}, 0x14}}, 0x8081) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9232f2b8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000200)="c67f0d7df9", 0x49}], 0x2) (async) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) 35.554907669s ago: executing program 9 (id=915): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$video4linux(0x0, 0x7fff, 0x48b03) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000dc0)={0x38, 0x5, 0x8, 0x9, 0x0, 0x9, 0x0, 0xaa, 0xfa11, 0xffffffff}, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r3, 0x0, 0x0, 0x0) shutdown(r3, 0x1) close(r2) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x2) r4 = getpid() socket$inet6_sctp(0xa, 0x5, 0x84) sched_setattr(r4, &(0x7f0000000340)={0x38, 0x6, 0x1000002d, 0x12000, 0x299c0, 0x7, 0x395400000000000, 0x2, 0x3, 0x5507}, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) r6 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) r7 = fcntl$dupfd(r6, 0x0, r6) write$binfmt_script(r7, 0x0, 0x0) write$binfmt_script(r7, &(0x7f0000001b00), 0xfffffd9d) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x54, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x54}}, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x3a, &(0x7f0000000980)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbb359bb6539865fb0d8f60bb06000000000000002c0002000000059078ac1414ff0a0101004402000000014e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c0000009078"], 0x0) sendmsg$IPSET_CMD_DESTROY(r9, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000000306010400000000000000000200e704050001000700000030692b5aebac0cd17186e7779be9ab9e218cc6ca0af0bd83226a6865a9f66727"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) 35.279064115s ago: executing program 8 (id=917): socket$inet6_udp(0xa, 0x2, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x60}, 0x1, 0x7}, 0x0) r1 = shmget$private(0x0, 0x400000, 0x184, &(0x7f0000c00000/0x400000)=nil) shmat(r1, &(0x7f0000000000/0x3000)=nil, 0x4000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x24) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4000, 0x0, 0x2000000000a, 0x2) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000380)=[@ioring_restriction_sqe_flags_required={0x3, 0x5}, @ioring_restriction_sqe_flags_required={0x3, 0x13}, @ioring_restriction_register_op={0x0, 0x2}, @ioring_restriction_sqe_flags_required={0x3, 0x8}, @ioring_restriction_sqe_flags_required={0x3, 0x11}], 0x5) ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, &(0x7f0000000080)={0xa37, 0x10000, 0x8, 0x8, 0x11, "3184e10458ac3109087945980ec324328d2ed0"}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002700)=0x23, 0x1c) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='sched\x00') timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x77359400}}, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) ioctl$TCXONC(r3, 0x540a, 0x0) write$P9_RREADDIR(r4, &(0x7f0000000600)={0xb, 0x29, 0x2}, 0xb) (fail_nth: 1) write$char_usb(r4, 0x0, 0x0) 32.966381752s ago: executing program 7 (id=921): chdir(&(0x7f0000000100)='./file0\x00') r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a38000000060a0155132607d09e6be5000200ffff0900020073797a32000000000900010073797a30000000000c0003"], 0x60}, 0x1, 0x0, 0x0, 0x20048880}, 0x0) 32.826474629s ago: executing program 7 (id=922): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000ae054f04a3a9cf000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000000a06030000000000000000000700000a280008800c00078008000940000000000c0007800800064000000075879822b9989668910ab8f571"], 0x3c}, 0x1, 0x0, 0x0, 0x880}, 0x8010) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000001440)=ANY=[@ANYBLOB="0017"], 0xc0) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000000000000007400", @ANYRES32=r3, @ANYBLOB="0000000000000000240012800b000100627269646765000014000280060027000000000005002d"], 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, 0x0, 0x0) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="200000000a0a0b0000000000060000000500000809004f73797a3000000000fef123d9ac4ca1192b79bcce43636d7d432f4a7bc4d1f7b415893edd2d4d6ac679eaff9f564be17edd7a9f223f0ef2c9243bce246a96a036ce7d42432c8e09e4a5e122c63fb70ef65eb7e462dc0b548330e9be5f78bf53983da9d1074f6e0569f2b0365b67db921d244fc50bb1fe28bb76f854b739"], 0x20}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r5, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r6) setgid(0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000ac0)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x0, 0x3}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xd, 0xd0ea, 0x10000000, 0x3, 0x4}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x50}, 0x0) socket(0x400000000010, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000200)={'lo\x00'}) 32.534146523s ago: executing program 7 (id=923): setns(0xc9, 0x0) r0 = syz_ublk_setup_io_uring(0x1b1d, &(0x7f0000000080)={0x0, 0x1c3f, 0x2, 0x2, 0xf1}, &(0x7f00000001c0), &(0x7f0000000200), 0x0) mmap$IORING_OFF_CQ_RING(0x0, 0x782, 0x1000002, 0x12, r0, 0x8000000) listns(&(0x7f0000000b80)={0x20, 0x0, 0xffffffffffffffff, 0x20000}, 0x0, 0xa00, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000540)=0x5) openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x414001, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0) r3 = open(&(0x7f00000003c0)='./file2\x00', 0x81, 0x10dd722b6e14c3dd) ioctl$BTRFS_IOC_DEFRAG(r3, 0x127c, 0x3) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x378, 0x180, 0x0, 0x2e0, 0x180, 0x448, 0x448, 0x330, 0x448, 0x448, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x218}}, {{@uncond, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@ip={@rand_addr, @dev, 0x0, 0x0, 'syzkaller0\x00', 'macvlan1\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf27, 0x500}, 0x50) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x3, 0x13, r7, 0x0) mremap(&(0x7f0000fa4000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000fa2000/0x1000)=nil) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x42000004, 0x0, 0x0) 31.366844175s ago: executing program 7 (id=924): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_connect$hid(0x3, 0x36, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) syz_usb_ep_write(r0, 0x81, 0x41, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668b") 30.934931211s ago: executing program 0 (id=880): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) close(r0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt(r1, 0x84, 0x80, &(0x7f00000002c0)="1400000009000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @empty}}], 0x1c) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) read$FUSE(r2, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="cf042b544000fedbdf251200000008000300", @ANYRES32=r6, @ANYBLOB="0a000600ffffffffffff000008001400", @ANYRES32=r6, @ANYBLOB], 0x30}}, 0x4814) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r3, 0x200, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x3ff, 0xa2a}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008814}, 0x4004080) sendto$inet6(r1, &(0x7f00000004c0)="b0", 0x1, 0x1f4, &(0x7f0000000240)={0xa, 0x4e23, 0x7, @loopback, 0x4}, 0x1c) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000780)={0x0, @in6={{0xa, 0x4e23, 0x3, @local}}}, 0x84) 30.479571558s ago: executing program 0 (id=925): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_connect$hid(0x3, 0x36, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) syz_usb_ep_write(r0, 0x81, 0x41, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668b") (fail_nth: 1) 29.742690055s ago: executing program 0 (id=927): ioctl(0xffffffffffffffff, 0x40104d05, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r3) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010329bd700000dcdf252400000018000180140002"], 0x2c}, 0x1, 0x0, 0x0, 0x44}, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) socket$packet(0x11, 0x3, 0x300) 28.600813721s ago: executing program 0 (id=928): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'c6xdigio\x00', [0x0, 0xb, 0x2, 0x1, 0xa, 0x5, 0x7c, 0x3, 0x80008, 0x0, 0x32, 0x2, 0x8, 0x4, 0x80000100, 0x9, 0xfffffffb, 0x3, 0x3, 0x7fffffff, 0x89, 0xca9f, 0xfffffffe, 0x20001e58, 0xffffffff, 0x1ff, 0x8, 0x80, 0xa6b5, 0x0, 0xfffffff8]}) socket$nl_route(0x10, 0x3, 0x0) r1 = getpid() syz_pidfd_open(r1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) 28.522258056s ago: executing program 0 (id=929): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000007c0), r0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x2c, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10}}, 0x74}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(aes)\x00'}, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001280)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x200002, 0xa) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) 28.186696597s ago: executing program 0 (id=930): chdir(&(0x7f0000000100)='./file0\x00') r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a38000000060a0155132607d09e6be5000200ffff0900020073797a32000000000900010073797a30000000000c0003"], 0x60}, 0x1, 0x0, 0x0, 0x20048880}, 0x0) 27.859367305s ago: executing program 49 (id=930): chdir(&(0x7f0000000100)='./file0\x00') r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a38000000060a0155132607d09e6be5000200ffff0900020073797a32000000000900010073797a30000000000c0003"], 0x60}, 0x1, 0x0, 0x0, 0x20048880}, 0x0) 27.326250028s ago: executing program 7 (id=932): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYBLOB="000900006440000008001b00000000000500100004"], 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) 26.474642687s ago: executing program 7 (id=933): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0x8, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x3, 0x2f, 0x0, @empty, @rand_addr=0x3}}}}) symlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') r1 = syz_usb_connect$hid(0x3, 0x36, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r3, 0x0, 0x18, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002bcc70010000000003000000200001800c00028088800300050000000d0001005664703a73"], 0x34}}, 0x8080) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) gettid() r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r9, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) r10 = openat(0xffffffffffffffff, &(0x7f0000000100)='\x00', 0x0, 0x3201374383c88532) fcntl$notify(0xffffffffffffffff, 0x402, 0x8000000f) fcntl$notify(r10, 0x402, 0x3000000) ioctl$I2C_PEC(r10, 0x708, 0x2) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="34fb83600000001000010800"/23, @ANYRESOCT=r2, @ANYRES32=r6, @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 20.306751626s ago: executing program 50 (id=915): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$video4linux(0x0, 0x7fff, 0x48b03) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000dc0)={0x38, 0x5, 0x8, 0x9, 0x0, 0x9, 0x0, 0xaa, 0xfa11, 0xffffffff}, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r3, 0x0, 0x0, 0x0) shutdown(r3, 0x1) close(r2) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x2) r4 = getpid() socket$inet6_sctp(0xa, 0x5, 0x84) sched_setattr(r4, &(0x7f0000000340)={0x38, 0x6, 0x1000002d, 0x12000, 0x299c0, 0x7, 0x395400000000000, 0x2, 0x3, 0x5507}, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) r6 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) r7 = fcntl$dupfd(r6, 0x0, r6) write$binfmt_script(r7, 0x0, 0x0) write$binfmt_script(r7, &(0x7f0000001b00), 0xfffffd9d) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x54, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x54}}, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x3a, &(0x7f0000000980)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbb359bb6539865fb0d8f60bb06000000000000002c0002000000059078ac1414ff0a0101004402000000014e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c0000009078"], 0x0) sendmsg$IPSET_CMD_DESTROY(r9, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000000306010400000000000000000200e704050001000700000030692b5aebac0cd17186e7779be9ab9e218cc6ca0af0bd83226a6865a9f66727"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) 20.126361437s ago: executing program 51 (id=917): socket$inet6_udp(0xa, 0x2, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x60}, 0x1, 0x7}, 0x0) r1 = shmget$private(0x0, 0x400000, 0x184, &(0x7f0000c00000/0x400000)=nil) shmat(r1, &(0x7f0000000000/0x3000)=nil, 0x4000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x24) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4000, 0x0, 0x2000000000a, 0x2) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000380)=[@ioring_restriction_sqe_flags_required={0x3, 0x5}, @ioring_restriction_sqe_flags_required={0x3, 0x13}, @ioring_restriction_register_op={0x0, 0x2}, @ioring_restriction_sqe_flags_required={0x3, 0x8}, @ioring_restriction_sqe_flags_required={0x3, 0x11}], 0x5) ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, &(0x7f0000000080)={0xa37, 0x10000, 0x8, 0x8, 0x11, "3184e10458ac3109087945980ec324328d2ed0"}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002700)=0x23, 0x1c) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='sched\x00') timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x77359400}}, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) ioctl$TCXONC(r3, 0x540a, 0x0) write$P9_RREADDIR(r4, &(0x7f0000000600)={0xb, 0x29, 0x2}, 0xb) (fail_nth: 1) write$char_usb(r4, 0x0, 0x0) 13.380290622s ago: executing program 2 (id=958): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000001000)={0x73622a85, 0x10b, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x54, 0x0, &(0x7f0000000e00)=[@acquire, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x58, 0x18, &(0x7f00000006c0)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x32}, @fd={0x66642a85, 0x0, r2}, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000bc0)={0x0, 0x28, 0x40}}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1, 0x1000000000000, &(0x7f0000000340)="cb"}) (fail_nth: 1) 13.122385426s ago: executing program 2 (id=959): r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x3, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @loopback, 0x6}, 0x4a) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000040)=0x40, 0x4) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000680)="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", 0x24a}], 0x1}}], 0x1, 0x4000001) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) 12.115931274s ago: executing program 1 (id=962): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000010000100f5fa1eac000000000000000a20000000000a01040000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000040028000480080002400000000008000140000000051400030076"], 0xe8}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a0302000200000000000002000000090002"], 0x80}}, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{0x0}], 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), 0xffffffffffffffff) r3 = socket(0x21, 0x3, 0xfffffffd) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000940)=ANY=[@ANYRESOCT=r2, @ANYBLOB, @ANYRESHEX=r3, @ANYRESDEC=r1], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, 0x0, 0x0) r5 = syz_open_dev$video4linux(&(0x7f0000000040), 0x5, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r5, 0xc038563b, &(0x7f0000000080)={0x0, 0x1, @raw_data=[0x7, 0x5, 0x26, 0x38, 0xfffffff8, 0x6, 0xc3b, 0xcb, 0x6de9, 0x7, 0xfffffff7, 0x5, 0x6, 0x0, 0xff4, 0x401]}) r6 = socket(0x11, 0x2, 0x0) setsockopt(r6, 0x107, 0x1, &(0x7f0000000880)="110000000280050000efdf2254f217c29f5b170e6990ebb65d60fda3ec38335b2b0f0690c797a777c185b58ef4bbcf15f6da45b8036208746f8b3a8945e056c7589a4615d2e22db6769bac0acf1bf8315240d8f031c68265890e517494c28351b890fb80be0a2ae3d95976cd2334d88f19d75fd508dc79b1231586be12d559876e3fa726bd754c4f081644d20c", 0x8d) r7 = socket$netlink(0x10, 0x3, 0x4) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240), 0x5, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, r9) r10 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000201c1b091c00000000000109022d0001000060000904008002030000000921080400012205000905810320000908070905"], 0x0) syz_usb_control_io(r10, 0x0, 0x0) sendmsg$IEEE802154_SCAN_REQ(r8, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x4068010) write(r7, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201500218ca36081e041d4073f7e1d585fde5c1ecbb0102030109021200010506300509047481008fb7840f"], &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0}) 11.045770123s ago: executing program 52 (id=933): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0x8, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x3, 0x2f, 0x0, @empty, @rand_addr=0x3}}}}) symlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') r1 = syz_usb_connect$hid(0x3, 0x36, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r3, 0x0, 0x18, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002bcc70010000000003000000200001800c00028088800300050000000d0001005664703a73"], 0x34}}, 0x8080) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) gettid() r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r9, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) r10 = openat(0xffffffffffffffff, &(0x7f0000000100)='\x00', 0x0, 0x3201374383c88532) fcntl$notify(0xffffffffffffffff, 0x402, 0x8000000f) fcntl$notify(r10, 0x402, 0x3000000) ioctl$I2C_PEC(r10, 0x708, 0x2) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="34fb83600000001000010800"/23, @ANYRESOCT=r2, @ANYRES32=r6, @ANYRES32, @ANYBLOB="08001b0000000000"], 0x34}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 10.673549872s ago: executing program 2 (id=964): r0 = socket$netlink(0x10, 0x3, 0x2) connect$netlink(r0, &(0x7f00000045c0)=@unspec, 0xc) close_range(r0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b000000000006000100070000000c0010"], 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x820) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000580), 0x200, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000540)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000180)={0x64, r1, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_VLAN_ID={0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4000000}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x9}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_MRU={0x6, 0x1d, 0xb57}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x7}]}, 0x64}, 0x1, 0x0, 0x0, 0x48844}, 0x4008080) r4 = syz_open_dev$loop(&(0x7f0000000140), 0x440, 0x46080) ioctl$BLKBSZSET(r4, 0x40081271, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f00000003c0)={r5, 0xffe, {0x0, 0x0, 0x0, 0x6, 0xfffffffffffffc00, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe53ea6abad0099cebdc25f5ab60c9e6d680f985881a8a0f3500000000000000000e0000000000000000000000000000000000ffff", "32d8cc26f7061a74df2cfc06c89f3d9a234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe7107f3f800b2f7b6aa54cc10a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce6, 0xa]}}) ioctl$VIDIOC_SUBDEV_S_FMT(r5, 0xc0585605, &(0x7f0000000080)={0x0, 0x0, {0x0, 0x5, 0x1008, 0x6, 0x8, 0x4, 0x1, 0x3}}) syz_emit_ethernet(0x111, &(0x7f0000000240)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa0800461501030068000004219078ac1e01010a01010201010001008616000000010710c4738607b71c128af840cf239602862800000003020e0ec1fb0cd9f89debbfa2a77400099c3c11033750d2000b085326f503e24d7e1e0000024e23043190782a13d613038089e5ce54a1a46c206a89df5007a83cd296ff4d8e71f2e1eca29706679b1702483306fdef0e68fe6f775cc58c10d991b2b38c3db215037ff385cfaff22ceca087f90eeaaf05432579f910ba3c934d3ad79836492d1b5c0ee8e0858631e24e2805c296e4d88d6ce876440282a05bb0ebe859730aca0b30dd68e2010c5b626ed7abdc901b2c12df02a823722761989dd15000d369a9ba7ed8d11dd0645c2a"], 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r6, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(r6, 0x89f5, &(0x7f0000000000)) r7 = openat$userio(0xffffffffffffff9c, 0x0, 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r7, 0x0, 0x0) syz_usb_connect(0x3, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000401107000900010000000109023c0001010080320904000006ffffff0007058e0200020007050e02000200070501020002000705030200020007058d0200020007050d020002"], 0x0) 10.551338585s ago: executing program 1 (id=965): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x204002, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x0, 0x2, 0x4, {0xa, 0x4e20, 0xb, @remote, 0x6}}}, 0x32) socket$kcm(0xa, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x2, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x64) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pread64(0xffffffffffffffff, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) preadv(0xffffffffffffffff, &(0x7f0000000240)=[{0x0}], 0x1, 0x91, 0x2) r1 = mq_open(&(0x7f0000000000)='e_1\x00', 0x8c2, 0x30, 0x0) mq_timedreceive(r1, 0x0, 0x0, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000440)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xa2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x1ffffffffffffe, 0x0) read$msr(r2, &(0x7f000004b680)=""/102392, 0x18ff8) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='xfs\x00', 0x808c, 0x0) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x6000, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000340)={0x0, 0x10005}, &(0x7f0000000380)=0x8) r4 = dup2(r3, r3) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000100)={'\x00', 0x42, 0xa, 0x3, 0x40000000, 0x800000000000010}) ioctl$BLKTRACESTART(r3, 0x1274, 0x0) 9.955310675s ago: executing program 1 (id=966): r0 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="12012000f1048108cd060202d4c34e01000109021b1901000000d40904150001da40df000905", @ANYRES64], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000280)='ns/cgroup\x00') write(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[], 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) socket(0x10, 0x3, 0x0) socket$inet6(0xa, 0x3, 0x7) r1 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x4) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f0000000780), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_create(0x3, 0x0, &(0x7f0000000300)) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x66dbf000) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$XFS_IOC_SET_RESBLKS(r3, 0xc0105872, &(0x7f0000000240)={0x1, 0x8}) pselect6(0x40, &(0x7f0000000040)={0x9, 0x800, 0x2, 0x300, 0x0, 0x10000000, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_configfs\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000180)='./my_configfs/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./my_configfs/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./my_configfs/usb_gadget/g1/functions/midi2.usb0\x00', 0x13f) openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.0/num_groups\x00', 0x1, 0x0) symlinkat(&(0x7f0000000880)='./my_configfs/usb_gadget/g1/functions/midi2.usb0\x00', 0xffffffffffffff9c, &(0x7f00000008c0)='./my_configfs/usb_gadget/g1/configs/c.1/midi2.usb0\x00') 9.356601543s ago: executing program 6 (id=940): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000007c0), r0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x2c, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10}}, 0x74}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(aes)\x00'}, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x200002, 0xa) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) 8.312240913s ago: executing program 6 (id=967): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'virt_wifi0\x00', 0x200}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xe, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0xc, 0xb}, {0x7, 0xffe2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x2004c090) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) write$proc_mixer(r6, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r7 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r7, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r8, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x41000, 0x1}, 0x94) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) 5.075579097s ago: executing program 1 (id=968): bpf$ITER_CREATE(0xb, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c000000020601020000000000000000000000000900020073797a310000000005000400009fc040c1d05cb65b7f9b002c6e657400000000050005000a00000005000100060000fc0fa14709fdddd6b3e4"], 0x4c}, 0x1, 0x0, 0x0, 0x20044000}, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fc0000000000000000000000000000011800018014000240ff01000000000000000000000000000105000300070000000900020073797a31"], 0x64}}, 0x4841) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x64}}, 0x4800) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000001c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) ioctl$AUTOFS_IOC_EXPIRE(r4, 0x810c9365, &(0x7f0000000380)={{0x2df2, 0x7}, 0x100, './file0\x00'}) sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x24, r5, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}]}, 0x24}}, 0x0) sendmsg$FOU_CMD_DEL(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r5, 0x1, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x1010}, 0x8000) sendmsg$NLBL_CALIPSO_C_LISTALL(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, r3, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x34}}, 0x8) 3.812703133s ago: executing program 2 (id=969): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'dummy0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x401, 0xfffffffc, 0x4000080, {0x0, 0x0, 0x0, 0x0, 0x17b93}, [@IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x30}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0x0, 0x0, 0x0, 0xa}, 0x94) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f00000000c0)={0x14, 0x49, 0x2, {0xa, 0x0, 0x6}}, 0x14) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x100000}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a9}, 0x0, 0x0) preadv(r6, &(0x7f0000000140)=[{0x0, 0x2000}, {&(0x7f0000000500)=""/84, 0x54}], 0x2, 0x4, 0x8008) ioctl$DRM_IOCTL_WAIT_VBLANK(r6, 0xc018643a, &(0x7f0000000080)={0x4000000, 0x5, 0x3}) shutdown(r0, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='tracefs\x00', 0x0, 0x0) 3.558735998s ago: executing program 1 (id=970): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f00000002c0)=0x100, 0x4) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x800448d2, &(0x7f0000000040)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00'}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth1\x00'}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x33e000, 0x1000}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f00000001c0)=0x10001, 0x4) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$tun(r4, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) eventfd2(0x7, 0x0) unshare(0x2c020400) pselect6(0x40, &(0x7f0000000000)={0xa, 0x80000001, 0x2, 0x10000000000006, 0x12, 0x8, 0x80000000, 0x8}, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) futex(0x0, 0x85, 0x8, 0x0, 0x0, 0x0) 2.107889571s ago: executing program 6 (id=971): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) mount(&(0x7f0000000080)=@filename='nodev\x00', 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008000}, 0x40095) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffc6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.075604511s ago: executing program 2 (id=972): r0 = syz_open_procfs(0x0, &(0x7f000001e680)='net/protocols\x00') pread64(r0, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) socket$packet(0x11, 0x2, 0x300) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f0000000f40)={0x6, 0x118, 0xfa00, {{0x9, 0x8, "6be475dc246509a4b20c875bf1a289d1a0a2dad36287056053b61cf6316d36ff98077ba69ef3174e3de8b836227cb52d5140c45a114628ec4633ac0fc1ff3445364d356108949874a132a90f6e9d8423cf73caf9039b509b3bd5bbc9e8e843a5118442c52aabe7120e57aa86a260c72b727073a62f53809d99f7ecf71c56e6bb5db338667c42941c9391e288c1802f300e8da376e0699d6dba8c8b6c5649b1517c2d2640bf84e05acd64562bca281ae54052e20c70cd3300cdf51a3a94fc0c50fe64f4244208ae8495e8c2917452583639c1d1f6aa22ea551fac524a26581146b2ea759e4dd2fdb84f0b07a627d50d435ccfcbc0b0577ce9ba17c793c564bc8c", 0x0, 0x7, 0x8, 0x5, 0x2, 0x3, 0x8}}}, 0x120) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_udp_int(r3, 0x11, 0x66, 0x0, 0x0) accept4$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000080)=0x1c, 0x80000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4e22, 0xb6, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000040), 0x3) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "dce02de9d7bd466b", "72e64b3892cb7025848c9f40363cf916", "cfff3c66", "e2b768b4bb9e0d9b"}, 0x28) sendto$inet6(r4, &(0x7f0000000300)='S', 0xfffffffffffffe94, 0xc000, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) close(r4) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5800000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="03800000000000003000128009000100766c616e000000002000028006000100030000000c0002000c0000001c0000000600050088a8000008000500", @ANYRES32], 0x58}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) 1.816715112s ago: executing program 1 (id=973): r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001280)={0x14, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0}, 0x0) syz_usb_connect$cdc_ecm(0x4, 0x66, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x54, 0x1, 0x1, 0x4, 0x0, 0x2, "", [{{0x9, 0x4, 0x0, 0x62, 0x2, 0x2, 0x6, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x0, "3a78eed7"}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x1, 0xffff, 0xa}, [@ncm={0x6, 0x24, 0x1a, 0x8}, @country_functional={0x6, 0x24, 0x7, 0x9, 0x3ff}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x40, 0x6, 0xfa, 0x2}}], {{0x9, 0x5, 0x82, 0x2, 0x400, 0x9, 0x3, 0xf2}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x0, 0x2, 0x4}}}}}]}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x201, 0x2, 0x7, 0x9, 0x10, 0x67}, 0xc7, &(0x7f00000002c0)={0x5, 0xf, 0xc7, 0x3, [@generic={0xad, 0x10, 0x4, "b03814714af73f43ecf61a371ea4de1932b36deb8316bf705554cbc41c28350aab20e58a5e1a4073157d80f63aa5fc1061a4548cf7d6edab40736f4991d680ce5716835d63a127ad0b56e6350c685dc5797c24e8cf0c49c699fe90085e73c26544f4e47a2fd54407e6a3b0ad21697f8fe159c2f15b7514c7adc1bf4fdb1ecde5722e5b892385e5cd9da8aa329deab02aa2fa760a11146e59fb56fd32f57139ba399f4a6ab78ee49fecfe"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x2, 0x4, 0x1}, @wireless={0xb, 0x10, 0x1, 0x48319b24c81cee5c, 0x5, 0xb, 0x0, 0x800, 0x7}]}, 0x1, [{0x48, &(0x7f00000003c0)=@string={0x48, 0x3, "ade454b5a8845eea6b91ce79ff5829d0b9457bc2aa15d42779e785753b41393090ea8d62fafb24b2d70058338741aef35792931aeeda3b6a01da76cf337140142e6ba3263355"}}]}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f0000000080)=ANY=[@ANYBLOB="545e9a", @ANYBLOB="4f0cff66dac50e65f4944faabbeb020c8e57572456bec593e0d2ecf32e6dddf38e8aff27f9a893cb516339027ad68134cc76951dd7b7ef951b95e92f41e5a68772e12edfe4c5eeb8cd72677beed3d4ff11"]) 1.478668325s ago: executing program 5 (id=939): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_open_dev$sg(&(0x7f0000000300), 0x4, 0x5730c2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f00000005c0)='fd', 0x0, r2) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x2) fchdir(r4) mkdir(&(0x7f00000002c0)='./file0\x00', 0xe0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) rmdir(&(0x7f0000000000)='./file0\x00') ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000100)={0x48}) ioctl$IOMMU_HWPT_ALLOC$NONE(r1, 0x3b89, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r7 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000280), 0x200080, 0x0) ioctl$TCFLSH(r7, 0x540b, 0x2) 1.454268181s ago: executing program 6 (id=974): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000007c0), r0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x2c, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10}}, 0x74}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(aes)\x00'}, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001280)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x8001a0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x200002, 0xa) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) connect$llc(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f7", 0xf4240}], 0x1}], 0x1, 0xf0ff) 940.964371ms ago: executing program 5 (id=975): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_open_dev$sg(&(0x7f0000000300), 0x4, 0x5730c2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f00000005c0)='fd', 0x0, r2) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x2) fchdir(r4) mkdir(&(0x7f00000002c0)='./file0\x00', 0xe0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) rmdir(&(0x7f0000000000)='./file0\x00') ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000100)={0x48}) ioctl$IOMMU_HWPT_ALLOC$NONE(r1, 0x3b89, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r7 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000280), 0x200080, 0x0) r8 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r8, 0xfffffffffffffffe, r8, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0xe201, 0x19c) ioctl$TCFLSH(r7, 0x540b, 0x2) 754.835717ms ago: executing program 2 (id=976): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000c000000000138d40a20000000000a01020000000000000000010000000900010073797a30000000004000000016203b0c7760f7f35ef5fb01000000000000000000010000010900010073797a30000000000900020073797a3000000000140003800800014000000000080002400000000630000000180a0101000b00000000003e9418020375444c6b9f00010000000900010073797a3000000000040003800900020073797a30000000001400000010000100000000"], 0xb8}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16, @ANYBLOB="050427bd7000ffdbdf2501000000080001"], 0x60}, 0x1, 0x0, 0x0, 0x4000431}, 0x4040084) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="1401000020000103"], 0x114}], 0x1, 0x0, 0x0, 0x4001}, 0xc040) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r6, @ANYBLOB="0c000280060001"], 0x24}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000480)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000580)={'gretap0\x00', &(0x7f00000004c0)={'tunl0\x00', 0x0, 0x1, 0x7, 0xf12, 0x9, {{0x21, 0x4, 0x1, 0x7, 0x84, 0x65, 0x0, 0x7, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}, @remote, {[@rr={0x7, 0x13, 0xe2, [@rand_addr=0x64010101, @broadcast, @empty, @loopback]}, @lsrr={0x83, 0xb, 0x2c, [@initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x13}]}, @end, @cipso={0x86, 0x29, 0x1, [{0x2, 0xd, "939e100a3ea2d4641ffe4f"}, {0x5, 0x12, "6879fd0fc0e13d9cbd387796917d0590"}, {0x74f3ac1dc7acffe8, 0x2}, {0x7, 0x2}]}, @timestamp_prespec={0x44, 0x24, 0x43, 0x3, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@remote, 0x1400000}, {@empty, 0x1}, {@dev={0xac, 0x14, 0x14, 0x35}}]}, @noop]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000680)={'ip_vti0\x00', &(0x7f00000005c0)={'erspan0\x00', 0x0, 0x1, 0x8000, 0x5, 0x5411, {{0x1e, 0x4, 0x0, 0x30, 0x78, 0x64, 0x0, 0x0, 0x0, 0x0, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_addr={0x44, 0x1c, 0x28, 0x1, 0x9, [{@private=0xa010102, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@loopback, 0x5}]}, @generic={0x5, 0x11, "b285fb7f1b0c55646f53a2c4688ae6"}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x18, 0x7c, 0x0, 0xf, [0x8, 0x0, 0x3, 0x8, 0x8]}, @generic={0x83, 0xd, "ce75ddf8d6594044e80fc4"}, @rr={0x7, 0xb, 0x89, [@multicast2, @rand_addr=0x64010102]}]}}}}}) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r10, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r12 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), r10) sendmsg$BATADV_CMD_GET_DAT_CACHE(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x24, r12, 0x83625fc5352ba305, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r11}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x24}}, 0x20088c4) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000006c0), &(0x7f0000000700)=0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000007c0)={'ip6_vti0\x00', &(0x7f0000000740)={'ip6_vti0\x00', 0x0, 0x29, 0x10, 0x9, 0xd, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, @private1, 0x80, 0x40, 0xa, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000880)={'ip6_vti0\x00', &(0x7f0000000800)={'ip6gre0\x00', 0x0, 0x2f, 0xd, 0x3, 0x7, 0x40, @dev={0xfe, 0x80, '\x00', 0x2b}, @empty, 0x7800, 0x1, 0x3, 0x8}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000008c0)={'wg2\x00', 0x0}) r16 = socket(0x10, 0x803, 0x0) r17 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r17) getsockname$packet(r17, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r16, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r18], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000000c80)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000c40)={&(0x7f0000000cc0)={0x284, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x4}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}]}]}, 0x284}, 0x1, 0x0, 0x0, 0x4000084}, 0x40011) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r3, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x8401}, 0x40) 570.700284ms ago: executing program 5 (id=977): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x2000300, 0xe, 0x0, &(0x7f0000000300)="d1d15563b98b9f3a286cd4ad2876", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x20044040}, 0x44040) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x48, 0x30, 0x871a15abc695f30d, 0x5, 0x25dfdbfc, {}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x48}}, 0x80) r3 = socket(0x80000000000000a, 0x2, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r4, 0x10c, 0x7, &(0x7f0000000040)=0x401, 0x4) setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x1, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e23, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}}}, 0x108) sendmmsg(r2, &(0x7f00000002c0), 0x0, 0x40000) 372.128522ms ago: executing program 6 (id=978): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000000a4f1c0000000000000000020000000900010073"], 0x5c}}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaa"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x3, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 1) 186.688248ms ago: executing program 5 (id=979): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_open_dev$sg(&(0x7f0000000300), 0x4, 0x5730c2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) sched_setaffinity(0x0, 0xffffffffffffff70, &(0x7f00000002c0)=0x6) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f00000005c0)='fd', 0x0, r2) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x2) fchdir(r4) mkdir(&(0x7f00000002c0)='./file0\x00', 0xe0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) rmdir(&(0x7f0000000000)='./file0\x00') ioctl$IOMMU_HWPT_ALLOC$NONE(r1, 0x3b89, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000280), 0x200080, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x2, {0x2, 0x0, 0x0, 0x4, 0xfe, 0x4, 0x0, 0x6, 0x1400}}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x4000000) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001800dd8d00"/28], 0x1c}}, 0x8c0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00008d15bd70000000000002000004fc0000083f950000"], 0x1c}}, 0x40008000) 0s ago: executing program 6 (id=980): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) keyctl$clear(0x3, 0xfffffffffffffffd) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) r4 = syz_open_dev$usbfs(0x0, 0x206, 0x20182) ioctl$USBDEVFS_ALLOW_SUSPEND(r4, 0x5522) r5 = socket(0x10, 0x803, 0x0) write(r5, &(0x7f0000000340)="2600000022004701050007108980e8ff06006d20002b1ffec0e901", 0x1b) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r5, &(0x7f0000000380)="120000001200e7ef007b00000000000000a1", 0x12, 0x20000090, 0x0, 0x0) recvmmsg(r5, 0x0, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000700)=""/245, 0xf5}, {&(0x7f0000000800)=""/163, 0xa3}, {&(0x7f0000000fc0)=""/157, 0x9d}, {&(0x7f00000008c0)=""/124, 0x7c}], 0x4}, 0xe}], 0x1, 0x10120, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000000140)={0x0, 0x2, "5a77bd318786aeb879ca62cdab2a02fa560186d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f68530c2b21a100efb76cba37ff3111d6847e0c7f719e169a596e5fc008daefba68f6222103472bc55704cdb72b4b996ed82ccb1eaae27969d008ba7d34171113d80672e65a6a0a72e19c2b60bd6276fd8bb6366e9d1ed9a60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13e4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe3635b2ee97c143f28def4b73905ca14d10d1f600"}) ioctl$USBDEVFS_SETINTERFACE(r3, 0x80045510, &(0x7f0000000040)={0x0, 0x200000}) ioctl$NILFS_IOCTL_GET_BDESCS(r2, 0xc0186e87, &(0x7f0000000640)={&(0x7f0000000540)=[{0x4, 0x8000000000000001, 0x4, 0x91, 0x1}, {0x3, 0x9, 0x0, 0x0, 0x4}, {0x800, 0xfffffffffffffff8, 0x4, 0x800, 0x2}, {0xc, 0x5, 0xffffffffffffffff, 0x3, 0x1}, {0x89e, 0x4, 0x0, 0x7fffffffffffffff, 0x5}, {0x5, 0x3, 0x8, 0x5, 0x2}], 0x6, 0x28, 0x5, 0x3}) syz_open_dev$vcsn(0x0, 0xd0f, 0x103000) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xe, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @sk_skb}, 0x94) getpgid(r0) syz_clone3(&(0x7f0000000340)={0xc6107700, &(0x7f00000000c0), 0x0, 0x0, {0x19}, 0x0, 0x0, 0x0, 0x0}, 0x58) kernel console output (not intermixed with test programs): name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 495.657670][ T29] audit: type=1400 audit(1785242368.770:605): avc: denied { write } for pid=9749 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 495.713094][ T9602] 8021q: adding VLAN 0 to HW filter on device bond0 [ 495.747628][ T9602] 8021q: adding VLAN 0 to HW filter on device team0 [ 495.781432][ T3351] bridge0: port 1(bridge_slave_0) entered blocking state [ 495.781489][ T3351] bridge0: port 1(bridge_slave_0) entered forwarding state [ 495.785157][ T3351] bridge0: port 2(bridge_slave_1) entered blocking state [ 495.785212][ T3351] bridge0: port 2(bridge_slave_1) entered forwarding state [ 497.015319][ T5627] Bluetooth: hci12: command tx timeout [ 498.072068][ T5727] net_ratelimit: 23 callbacks suppressed [ 498.072081][ T5727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.075746][ T6748] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.075798][ T6748] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.075849][ T6748] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.075893][ T6748] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.076063][ T6748] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.123067][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.123438][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.041253][ T5727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.203958][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.202827][ T29] audit: type=1400 audit(1785242373.310:606): avc: denied { write } for pid=9753 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 500.384455][ T5627] Bluetooth: unknown link type 78 [ 500.384488][ T5627] Bluetooth: hci10: connection err: -111 [ 500.534712][ T29] audit: type=1400 audit(1785242373.650:607): avc: denied { write } for pid=9781 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 500.550272][ T9785] FAULT_INJECTION: forcing a failure. [ 500.550272][ T9785] name failslab, interval 1, probability 0, space 0, times 0 [ 500.550299][ T9785] CPU: 0 UID: 0 PID: 9785 Comm: syz.6.840 Tainted: G L syzkaller #0 PREEMPT(full) [ 500.550330][ T9785] Tainted: [L]=SOFTLOCKUP [ 500.550337][ T9785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 500.550350][ T9785] Call Trace: [ 500.550354][ T9785] [ 500.550358][ T9785] dump_stack_lvl+0x100/0x190 [ 500.550377][ T9785] should_fail_ex.cold+0x5/0xa [ 500.550392][ T9785] should_failslab+0xc2/0x120 [ 500.550408][ T9785] __kmalloc_noprof+0xfc/0x820 [ 500.550421][ T9785] ? rcu_is_watching+0x12/0xc0 [ 500.550440][ T9785] ? tomoyo_realpath_from_path+0xb6/0x690 [ 500.550456][ T9785] tomoyo_realpath_from_path+0xb6/0x690 [ 500.550471][ T9785] tomoyo_path_number_perm+0x23c/0x580 [ 500.550488][ T9785] ? tomoyo_path_number_perm+0x22e/0x580 [ 500.550506][ T9785] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 500.550538][ T9785] ? find_held_lock+0x2b/0x80 [ 500.550559][ T9785] ? __fget_files+0x215/0x3d0 [ 500.550571][ T9785] ? hook_file_ioctl_common+0x140/0x440 [ 500.550584][ T9785] ? __fget_files+0x215/0x3d0 [ 500.550598][ T9785] ? __fget_files+0x21f/0x3d0 [ 500.550612][ T9785] security_file_ioctl+0xd3/0x230 [ 500.550632][ T9785] __x64_sys_ioctl+0xb7/0x210 [ 500.550651][ T9785] do_syscall_64+0x115/0x870 [ 500.550665][ T9785] ? clear_bhb_loop+0x40/0x90 [ 500.550680][ T9785] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.550692][ T9785] RIP: 0033:0x7f2be1d9de99 [ 500.550702][ T9785] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 500.550713][ T9785] RSP: 002b:00007f2be2c74028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 500.550724][ T9785] RAX: ffffffffffffffda RBX: 00007f2be2025fa0 RCX: 00007f2be1d9de99 [ 500.550732][ T9785] RDX: 00002000000000c0 RSI: 0000000040946400 RDI: 0000000000000003 [ 500.550739][ T9785] RBP: 00007f2be2c74090 R08: 0000000000000000 R09: 0000000000000000 [ 500.550746][ T9785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 500.550753][ T9785] R13: 00007f2be2026038 R14: 00007f2be2025fa0 R15: 00007ffc3a7c5dc8 [ 500.550768][ T9785] [ 500.558716][ T9785] ERROR: Out of memory at tomoyo_realpath_from_path. [ 500.675044][ T9602] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 500.731552][ T9789] FAULT_INJECTION: forcing a failure. [ 500.731552][ T9789] name failslab, interval 1, probability 0, space 0, times 0 [ 500.731576][ T9789] CPU: 0 UID: 0 PID: 9789 Comm: syz.6.841 Tainted: G L syzkaller #0 PREEMPT(full) [ 500.731593][ T9789] Tainted: [L]=SOFTLOCKUP [ 500.731597][ T9789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 500.731605][ T9789] Call Trace: [ 500.731609][ T9789] [ 500.731613][ T9789] dump_stack_lvl+0x100/0x190 [ 500.731632][ T9789] should_fail_ex.cold+0x5/0xa [ 500.731647][ T9789] should_failslab+0xc2/0x120 [ 500.731663][ T9789] __kmalloc_noprof+0xfc/0x820 [ 500.731677][ T9789] ? iovec_from_user+0x8d/0x140 [ 500.731697][ T9789] iovec_from_user+0x8d/0x140 [ 500.731715][ T9789] __import_iovec+0x81/0x640 [ 500.731735][ T9789] import_iovec+0x101/0x130 [ 500.731753][ T9789] vfs_writev+0x197/0xdd0 [ 500.731775][ T9789] ? __pfx_vfs_writev+0x10/0x10 [ 500.731791][ T9789] ? find_held_lock+0x2b/0x80 [ 500.731821][ T9789] ? __fget_files+0x21f/0x3d0 [ 500.731837][ T9789] ? do_pwritev+0x1ac/0x270 [ 500.731853][ T9789] do_pwritev+0x1ac/0x270 [ 500.731871][ T9789] ? __pfx_do_pwritev+0x10/0x10 [ 500.731889][ T9789] ? ksys_write+0x1ac/0x250 [ 500.731906][ T9789] ? __pfx_ksys_write+0x10/0x10 [ 500.731926][ T9789] __x64_sys_pwritev2+0xef/0x160 [ 500.731940][ T9789] do_syscall_64+0x115/0x870 [ 500.731954][ T9789] ? clear_bhb_loop+0x40/0x90 [ 500.731969][ T9789] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.731981][ T9789] RIP: 0033:0x7f2be1d9de99 [ 500.731991][ T9789] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 500.732002][ T9789] RSP: 002b:00007f2be2c74028 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 500.732014][ T9789] RAX: ffffffffffffffda RBX: 00007f2be2025fa0 RCX: 00007f2be1d9de99 [ 500.732022][ T9789] RDX: 0000000000000021 RSI: 0000200000000240 RDI: 0000000000000006 [ 500.732029][ T9789] RBP: 00007f2be2c74090 R08: 0000000000000000 R09: 0000000000000003 [ 500.732036][ T9789] R10: 0000000000007800 R11: 0000000000000246 R12: 0000000000000001 [ 500.732046][ T9789] R13: 00007f2be2026038 R14: 00007f2be2025fa0 R15: 00007ffc3a7c5dc8 [ 500.732061][ T9789] [ 501.333994][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.334028][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.066717][ T9799] vcan0: tx drop: invalid sa for name 0x0000000020000000 [ 502.874166][ T9602] veth0_vlan: entered promiscuous mode [ 502.884272][ T9602] veth1_vlan: entered promiscuous mode [ 502.918646][ T9602] veth0_macvtap: entered promiscuous mode [ 502.929412][ T9602] veth1_macvtap: entered promiscuous mode [ 502.963335][ T9602] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 502.968379][ T9602] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 503.043623][ T1053] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.050696][ T165] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.050731][ T165] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.050752][ T165] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.083660][ T1235] net_ratelimit: 23 callbacks suppressed [ 503.083672][ T1235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 503.488007][ T5727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 503.488185][ T5727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 503.488235][ T5727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 503.488522][ T5727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 503.854900][ T3351] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 504.129973][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 504.130035][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 504.424226][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 504.424243][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 504.451400][ T9812] overlayfs: overlapping lowerdir path [ 504.626575][ T6365] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 504.633251][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 504.689580][ T77] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 504.689595][ T77] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 505.214078][ T5627] Bluetooth: unknown link type 78 [ 505.214097][ T5627] Bluetooth: hci10: connection err: -111 [ 505.706995][ T6616] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 505.862704][ T6616] usb 7-1: Using ep0 maxpacket: 8 [ 505.865447][ T6616] usb 7-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 505.865467][ T6616] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.865480][ T6616] usb 7-1: Product: syz [ 505.865489][ T6616] usb 7-1: Manufacturer: syz [ 505.865499][ T6616] usb 7-1: SerialNumber: syz [ 505.867022][ T6616] usb 7-1: config 0 descriptor?? [ 505.884938][ T6616] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 506.520639][ T29] audit: type=1400 audit(1785242379.630:608): avc: denied { accept } for pid=9839 comm="syz.5.852" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 506.591013][ T29] audit: type=1400 audit(1785242379.700:609): avc: denied { read } for pid=9839 comm="syz.5.852" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 506.730407][ T9835] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 506.730668][ T9835] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 506.935889][ T6616] gspca_sonixj: reg_w1 err -71 [ 506.973146][ T6616] sonixj 7-1:0.0: probe with driver sonixj failed with error -71 [ 506.974707][ T6616] usb 7-1: USB disconnect, device number 11 [ 507.284791][ T5625] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 507.290441][ T5625] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 507.290955][ T5625] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 507.291407][ T5625] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 507.291732][ T5625] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 508.370349][ T9] net_ratelimit: 22 callbacks suppressed [ 508.370363][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 508.370473][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 508.595410][ T3351] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 508.692817][ T9844] bridge0: port 1(bridge_slave_0) entered blocking state [ 508.692869][ T9844] bridge0: port 1(bridge_slave_0) entered disabled state [ 508.693010][ T9844] bridge_slave_0: entered allmulticast mode [ 508.699276][ T9844] bridge_slave_0: entered promiscuous mode [ 508.716841][ T9844] bridge0: port 2(bridge_slave_1) entered blocking state [ 508.716929][ T9844] bridge0: port 2(bridge_slave_1) entered disabled state [ 508.717039][ T9844] bridge_slave_1: entered allmulticast mode [ 508.723787][ T9844] bridge_slave_1: entered promiscuous mode [ 508.769298][ T6616] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 508.769355][ T6616] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 508.769495][ T6616] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 508.769564][ T6616] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 508.849754][ T9844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 508.851631][ T9844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 508.894707][ T5627] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 508.912311][ T9844] team0: Port device team_slave_0 added [ 508.920434][ T5627] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 508.928235][ T5627] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 508.930198][ T5627] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 508.930500][ T5627] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 508.972351][ T9844] team0: Port device team_slave_1 added [ 509.058143][ T9844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 509.058156][ T9844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 509.058173][ T9844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 509.100672][ T9844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 509.100685][ T9844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 509.100702][ T9844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 509.238918][ T9844] hsr_slave_0: entered promiscuous mode [ 509.247202][ T9844] hsr_slave_1: entered promiscuous mode [ 509.247709][ T9844] debugfs: 'hsr0' already exists in 'hsr' [ 509.247723][ T9844] Cannot create hsr debugfs directory [ 509.324431][ T5627] Bluetooth: hci13: command tx timeout [ 509.707329][ T165] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 509.805644][ T6365] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 509.805709][ T6365] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.000809][ T9844] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.199164][ T9844] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.354330][ T9844] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.554259][ T9844] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.002634][ T5627] Bluetooth: hci14: command tx timeout [ 511.403817][ T5627] Bluetooth: hci13: command tx timeout [ 512.032105][ T9897] comedi comedi0: 8255: I/O base address not correctly aligned [ 512.049091][ T9] IPVS: starting estimator thread 0... [ 512.057775][ T9897] bridge1: entered promiscuous mode [ 512.057790][ T9897] bridge1: entered allmulticast mode [ 512.059343][ T9897] team0: Port device bridge1 added [ 512.133175][ T9903] IPVS: using max 65 ests per chain, 156000 per kthread [ 512.556160][ T9874] bridge0: port 1(bridge_slave_0) entered blocking state [ 512.556214][ T9874] bridge0: port 1(bridge_slave_0) entered disabled state [ 512.556386][ T9874] bridge_slave_0: entered allmulticast mode [ 512.557349][ T9874] bridge_slave_0: entered promiscuous mode [ 512.560047][ T9874] bridge0: port 2(bridge_slave_1) entered blocking state [ 512.560097][ T9874] bridge0: port 2(bridge_slave_1) entered disabled state [ 512.560191][ T9874] bridge_slave_1: entered allmulticast mode [ 512.563425][ T9874] bridge_slave_1: entered promiscuous mode [ 512.564270][ T9844] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 512.566734][ T9844] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 512.567209][ T9844] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 512.568945][ T9844] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 512.597787][ T9844] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 512.599701][ T9844] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 512.600364][ T9844] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 512.602152][ T9844] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 512.618401][ T9874] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 512.636238][ T9874] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 512.691562][ T9874] team0: Port device team_slave_0 added [ 512.696793][ T9874] team0: Port device team_slave_1 added [ 512.756807][ T9874] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 512.756821][ T9874] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 512.756837][ T9874] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 512.757972][ T9874] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 512.757982][ T9874] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 512.757998][ T9874] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 512.824470][ T9844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 512.830263][ T9844] 8021q: adding VLAN 0 to HW filter on device team0 [ 512.837978][ T9874] hsr_slave_0: entered promiscuous mode [ 512.838571][ T9874] hsr_slave_1: entered promiscuous mode [ 512.838960][ T9874] debugfs: 'hsr0' already exists in 'hsr' [ 512.838972][ T9874] Cannot create hsr debugfs directory [ 512.849092][ T77] bridge0: port 1(bridge_slave_0) entered blocking state [ 512.849147][ T77] bridge0: port 1(bridge_slave_0) entered forwarding state [ 512.866402][ T77] bridge0: port 2(bridge_slave_1) entered blocking state [ 512.866458][ T77] bridge0: port 2(bridge_slave_1) entered forwarding state [ 513.083961][ T5627] Bluetooth: hci14: command tx timeout [ 513.240071][ T9874] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.337615][ T9874] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.463586][ T9874] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.485332][ T5627] Bluetooth: hci13: command tx timeout [ 513.510537][ T77] net_ratelimit: 20 callbacks suppressed [ 513.510551][ T77] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 513.545222][ T9874] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.921538][ T9844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 513.936568][ T9874] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 513.940374][ T9874] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 513.945951][ T9874] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 513.949640][ T9874] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 513.959780][ T9874] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 513.972311][ T9874] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 513.978036][ T9874] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 514.008695][ T9874] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 514.044923][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.044982][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.045119][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.045169][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.192431][ T9874] 8021q: adding VLAN 0 to HW filter on device bond0 [ 514.208807][ T9874] 8021q: adding VLAN 0 to HW filter on device team0 [ 514.216296][ T77] bridge0: port 1(bridge_slave_0) entered blocking state [ 514.216352][ T77] bridge0: port 1(bridge_slave_0) entered forwarding state [ 514.234382][ T77] bridge0: port 2(bridge_slave_1) entered blocking state [ 514.234438][ T77] bridge0: port 2(bridge_slave_1) entered forwarding state [ 514.410357][ T9844] veth0_vlan: entered promiscuous mode [ 514.425887][ T9844] veth1_vlan: entered promiscuous mode [ 514.479018][ T9844] veth0_macvtap: entered promiscuous mode [ 514.487688][ T9844] veth1_macvtap: entered promiscuous mode [ 514.520525][ T9844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 514.541370][ T9844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 514.557090][ T77] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.557121][ T77] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.557142][ T77] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.557171][ T77] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.615029][ T3343] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.730622][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 514.730638][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 514.818574][ T9102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 514.818590][ T9102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 515.008662][ T6365] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 515.084141][ T5727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 515.084204][ T5727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 515.084342][ T5727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 515.163022][ T5627] Bluetooth: hci14: command tx timeout [ 515.563708][ T5627] Bluetooth: hci13: command tx timeout [ 516.175377][ T9874] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 516.240525][ T9874] veth0_vlan: entered promiscuous mode [ 516.256224][ T9874] veth1_vlan: entered promiscuous mode [ 516.299325][ T9874] veth0_macvtap: entered promiscuous mode [ 516.312967][ T9874] veth1_macvtap: entered promiscuous mode [ 516.338723][ T9874] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 516.349774][ T9874] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 516.397730][ T9900] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.397782][ T9900] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.397803][ T9900] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.397824][ T9900] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.535322][ T3351] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 516.535334][ T3351] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 516.573054][ T165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 516.573081][ T165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 516.779001][ T9951] comedi comedi3: c6xdigio: a I/O base address must be specified [ 517.243031][ T5627] Bluetooth: hci14: command tx timeout [ 518.041184][ T29] audit: type=1400 audit(1785242391.150:610): avc: denied { listen } for pid=9960 comm="syz.3.864" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 518.671892][ T3343] net_ratelimit: 20 callbacks suppressed [ 518.671903][ T3343] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 519.249141][ T5735] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 519.329777][ T1235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 519.329842][ T1235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 519.329980][ T1235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 519.330024][ T1235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 519.330071][ T1235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 519.330114][ T1235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 519.766809][ T3351] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 520.106078][ T5625] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 520.109077][ T5625] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 520.111112][ T5625] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 520.112062][ T5625] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 520.112352][ T5625] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 520.366916][ T1235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 520.785385][ T9966] bridge0: port 1(bridge_slave_0) entered blocking state [ 520.791081][ T9966] bridge0: port 1(bridge_slave_0) entered disabled state [ 520.791305][ T9966] bridge_slave_0: entered allmulticast mode [ 520.792282][ T9966] bridge_slave_0: entered promiscuous mode [ 520.799358][ T9966] bridge0: port 2(bridge_slave_1) entered blocking state [ 520.799442][ T9966] bridge0: port 2(bridge_slave_1) entered disabled state [ 520.799538][ T9966] bridge_slave_1: entered allmulticast mode [ 520.800429][ T9966] bridge_slave_1: entered promiscuous mode [ 520.838416][ T9966] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 520.850510][ T9966] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 520.885919][ T9966] team0: Port device team_slave_0 added [ 520.887667][ T9966] team0: Port device team_slave_1 added [ 520.928066][ T9966] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 520.928078][ T9966] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 520.928094][ T9966] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 520.929409][ T9966] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 520.929418][ T9966] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 520.929435][ T9966] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 520.998189][ T9966] hsr_slave_0: entered promiscuous mode [ 520.998849][ T9966] hsr_slave_1: entered promiscuous mode [ 520.999270][ T9966] debugfs: 'hsr0' already exists in 'hsr' [ 520.999283][ T9966] Cannot create hsr debugfs directory [ 521.278249][ T9966] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.381489][ T9966] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.439648][ T9966] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.491840][ T9966] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.743163][ T9966] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 521.745339][ T9966] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 521.745980][ T9966] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 521.753665][ T9966] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 521.754635][ T9966] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 521.756859][ T9966] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 521.757469][ T9966] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 521.759175][ T9966] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 521.878638][ T9966] 8021q: adding VLAN 0 to HW filter on device bond0 [ 521.901928][ T9966] 8021q: adding VLAN 0 to HW filter on device team0 [ 521.909303][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 521.909358][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 521.914783][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 521.914836][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 522.204658][ T5625] Bluetooth: hci15: command tx timeout [ 522.412125][ T9966] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 522.716273][ T9966] veth0_vlan: entered promiscuous mode [ 522.728961][ T9966] veth1_vlan: entered promiscuous mode [ 522.756869][ T9966] veth0_macvtap: entered promiscuous mode [ 522.759425][ T9966] veth1_macvtap: entered promiscuous mode [ 522.779112][ T9966] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 522.803152][ T9966] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 522.808579][ T3351] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.808668][ T3351] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.808742][ T3351] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.808923][ T3351] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.942477][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 522.942493][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 523.018334][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 523.018351][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 523.556065][ T5627] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 523.560802][ T5627] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 523.564235][ T5627] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 523.564763][ T5627] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 523.565055][ T5627] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 524.124693][ T5735] net_ratelimit: 22 callbacks suppressed [ 524.124704][ T5735] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 524.206889][ T165] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 524.288077][ T5625] Bluetooth: hci15: command tx timeout [ 524.534426][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 524.534496][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 524.534636][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 524.534689][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 524.832028][T10011] bridge0: port 1(bridge_slave_0) entered blocking state [ 524.832080][T10011] bridge0: port 1(bridge_slave_0) entered disabled state [ 524.832174][T10011] bridge_slave_0: entered allmulticast mode [ 524.840717][T10011] bridge_slave_0: entered promiscuous mode [ 524.846817][T10011] bridge0: port 2(bridge_slave_1) entered blocking state [ 524.846895][T10011] bridge0: port 2(bridge_slave_1) entered disabled state [ 524.846990][T10011] bridge_slave_1: entered allmulticast mode [ 524.850568][T10011] bridge_slave_1: entered promiscuous mode [ 524.943601][T10011] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 524.949175][T10011] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 525.023934][T10011] team0: Port device team_slave_0 added [ 525.028746][T10011] team0: Port device team_slave_1 added [ 525.136920][T10011] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 525.136933][T10011] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 525.136950][T10011] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 525.143576][T10011] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 525.143589][T10011] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 525.143605][T10011] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 525.234763][T10011] hsr_slave_0: entered promiscuous mode [ 525.240571][T10011] hsr_slave_1: entered promiscuous mode [ 525.241040][T10011] debugfs: 'hsr0' already exists in 'hsr' [ 525.241054][T10011] Cannot create hsr debugfs directory [ 525.336319][ T5735] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 525.355359][ T3351] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 525.403812][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 525.403894][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 525.655937][ T5625] Bluetooth: hci12: command tx timeout [ 525.782191][T10011] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.938547][T10011] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.056607][T10011] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.184483][T10011] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.307162][ T5627] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 526.309140][ T5627] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 526.310090][ T5627] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 526.310566][ T5627] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 526.311353][ T5627] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 526.363464][ T5627] Bluetooth: hci15: command tx timeout [ 526.757451][T10011] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 526.770578][T10011] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 526.774973][T10011] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 526.806183][T10011] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 526.810118][T10011] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 526.821382][T10011] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 526.821932][T10011] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 526.830265][T10011] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 527.121381][T10011] 8021q: adding VLAN 0 to HW filter on device bond0 [ 527.219321][T10011] 8021q: adding VLAN 0 to HW filter on device team0 [ 527.254378][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 527.254433][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 527.280175][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 527.280237][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 527.723092][ T5627] Bluetooth: hci12: command tx timeout [ 528.364490][ T5627] Bluetooth: hci16: command tx timeout [ 528.400107][T10096] vcan0: tx drop: invalid sa for name 0x0000000020000000 [ 528.444503][ T5627] Bluetooth: hci15: command tx timeout [ 528.641366][T10104] netlink: 8 bytes leftover after parsing attributes in process `syz.8.870'. [ 529.049476][T10063] bridge0: port 1(bridge_slave_0) entered blocking state [ 529.058724][T10063] bridge0: port 1(bridge_slave_0) entered disabled state [ 529.058856][T10063] bridge_slave_0: entered allmulticast mode [ 529.059856][T10063] bridge_slave_0: entered promiscuous mode [ 529.062969][T10063] bridge0: port 2(bridge_slave_1) entered blocking state [ 529.063042][T10063] bridge0: port 2(bridge_slave_1) entered disabled state [ 529.063145][T10063] bridge_slave_1: entered allmulticast mode [ 529.064070][T10063] bridge_slave_1: entered promiscuous mode [ 529.149101][T10063] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 529.156742][T10063] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 529.218415][T10063] team0: Port device team_slave_0 added [ 529.221744][T10063] team0: Port device team_slave_1 added [ 529.273224][T10063] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 529.273238][T10063] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 529.273254][T10063] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 529.285169][T10063] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 529.285182][T10063] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 529.285198][T10063] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 529.334701][T10011] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 529.387937][T10063] hsr_slave_0: entered promiscuous mode [ 529.390690][T10063] hsr_slave_1: entered promiscuous mode [ 529.391178][T10063] debugfs: 'hsr0' already exists in 'hsr' [ 529.391193][T10063] Cannot create hsr debugfs directory [ 529.430611][ T12] net_ratelimit: 26 callbacks suppressed [ 529.430622][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.727223][ T5735] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.727299][ T5735] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.727483][ T5735] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.727533][ T5735] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.804745][ T5627] Bluetooth: hci12: command tx timeout [ 530.007361][T10063] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.227978][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.228142][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.312155][T10063] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.330590][T10011] veth0_vlan: entered promiscuous mode [ 530.341751][T10011] veth1_vlan: entered promiscuous mode [ 530.413792][T10063] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.444387][ T5627] Bluetooth: hci16: command tx timeout [ 530.484258][T10063] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.495771][T10011] veth0_macvtap: entered promiscuous mode [ 530.499110][T10011] veth1_macvtap: entered promiscuous mode [ 530.524955][T10011] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 530.565475][T10011] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 530.591569][ T59] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.592210][ T59] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.592300][ T59] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.592378][ T59] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.690367][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.789542][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.789600][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.987871][ T1053] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 530.987887][ T1053] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 531.157593][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 531.157608][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 531.161424][T10063] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 531.167575][T10063] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 531.168068][T10063] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 531.169753][T10063] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 531.171344][T10063] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 531.195218][T10063] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 531.199766][T10063] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 531.201774][T10063] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 531.435289][T10063] 8021q: adding VLAN 0 to HW filter on device bond0 [ 531.469632][T10063] 8021q: adding VLAN 0 to HW filter on device team0 [ 531.535549][ T1053] bridge0: port 1(bridge_slave_0) entered blocking state [ 531.535605][ T1053] bridge0: port 1(bridge_slave_0) entered forwarding state [ 531.536737][ T1053] bridge0: port 2(bridge_slave_1) entered blocking state [ 531.537197][ T1053] bridge0: port 2(bridge_slave_1) entered forwarding state [ 531.888329][ T5627] Bluetooth: hci12: command tx timeout [ 532.524507][ T5627] Bluetooth: hci16: command tx timeout [ 532.538618][ T29] audit: type=1400 audit(1785242405.650:611): avc: denied { create } for pid=10171 comm="syz.7.877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 532.557615][ T29] audit: type=1400 audit(1785242405.670:612): avc: denied { bind } for pid=10171 comm="syz.7.877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 532.557647][ T29] audit: type=1400 audit(1785242405.670:613): avc: denied { listen } for pid=10171 comm="syz.7.877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 532.871445][T10173] netlink: 112 bytes leftover after parsing attributes in process `syz.7.877'. [ 532.947133][T10063] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 532.958451][ T5625] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 532.962280][ T5625] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 532.964057][ T5625] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 532.964527][ T5625] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 532.967983][ T5625] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 533.663389][ T5627] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 533.666921][ T5627] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 533.667890][ T5627] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 533.668352][ T5627] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 533.668646][ T5627] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 534.038824][T10063] veth0_vlan: entered promiscuous mode [ 534.107590][T10063] veth1_vlan: entered promiscuous mode [ 534.285536][T10063] veth0_macvtap: entered promiscuous mode [ 534.317609][T10063] veth1_macvtap: entered promiscuous mode [ 534.474599][T10063] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 534.476933][T10063] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 534.639105][ T5727] net_ratelimit: 21 callbacks suppressed [ 534.639117][ T5727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 534.639167][ T5727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 534.641787][ T5627] Bluetooth: hci16: command tx timeout [ 534.669837][ T1053] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 534.672454][ T1235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 534.674339][ T5735] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 534.736144][ T6269] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.736179][ T6269] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.736200][ T6269] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.736221][ T6269] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.910019][T10226] blktrace: Concurrent blktraces are not allowed on loop14 [ 534.929537][ T1235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 534.929593][ T1235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 534.929731][ T1235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 534.929781][ T1235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 535.004287][ T5627] Bluetooth: hci17: command tx timeout [ 535.303880][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 535.303896][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 535.424259][ T6269] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 535.622709][T10235] CIFS: VFS: UNC: path must begin with // or \\ [ 535.622724][T10235] Malformed UNC in devname [ 535.622724][T10235] [ 535.622768][T10235] CIFS: VFS: Malformed UNC in devname [ 535.623175][ T29] audit: type=1400 audit(1785242408.730:614): avc: denied { getopt } for pid=10230 comm="syz.7.885" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 535.723936][ T5627] Bluetooth: hci18: command tx timeout [ 535.786782][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 535.786796][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 536.250391][T10251] fuse: Unknown parameter '' [ 537.082907][ T5627] Bluetooth: hci17: command tx timeout [ 537.437199][T10251] fuse: Unknown parameter 'ÿ0x0000000000000000j·e£(X–鮚ž¹W°b4×ÙC T¯µØÇ\„‘˜ØJJç+ÇøI[õŠ@Ú'ü¢XF?k½n`†é7ÏòH”>IXâ/ Âr5¡Ø„öR×»dãíËFgLËÔÐUÜá¹pé>~Bñ$YZ+9™àO@eÀµýóA6Ä®m ý@ˆÆGGR' [ 537.445248][ T29] audit: type=1400 audit(1785242410.560:615): avc: denied { getopt } for pid=10250 comm="syz.7.888" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 537.805626][ T5627] Bluetooth: hci18: command tx timeout [ 537.919982][T10267] netlink: 56 bytes leftover after parsing attributes in process `syz.7.891'. [ 538.342103][T10183] bridge0: port 1(bridge_slave_0) entered blocking state [ 538.342164][T10183] bridge0: port 1(bridge_slave_0) entered disabled state [ 538.342311][T10183] bridge_slave_0: entered allmulticast mode [ 538.719581][T10183] bridge_slave_0: entered promiscuous mode [ 539.087280][T10183] bridge0: port 2(bridge_slave_1) entered blocking state [ 539.087337][T10183] bridge0: port 2(bridge_slave_1) entered disabled state [ 539.087538][T10183] bridge_slave_1: entered allmulticast mode [ 539.162613][ T5627] Bluetooth: hci17: command tx timeout [ 539.231409][T10183] bridge_slave_1: entered promiscuous mode [ 539.389115][T10183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 539.448111][T10183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 539.635130][T10183] team0: Port device team_slave_0 added [ 539.664198][T10183] team0: Port device team_slave_1 added [ 539.882986][ T5627] Bluetooth: hci18: command tx timeout [ 540.610240][ T6365] net_ratelimit: 25 callbacks suppressed [ 540.610254][ T6365] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 540.610433][ T6365] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 540.610485][ T6365] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 540.610744][ T6365] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 540.611187][ T5735] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 540.780940][ T77] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 540.781320][ T6365] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 540.804206][T10183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 540.804217][T10183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 540.804233][T10183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 540.819341][T10183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 540.819351][T10183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 540.819367][T10183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 540.851050][ T6365] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 540.904048][T10199] bridge0: port 1(bridge_slave_0) entered blocking state [ 540.904099][T10199] bridge0: port 1(bridge_slave_0) entered disabled state [ 540.904207][T10199] bridge_slave_0: entered allmulticast mode [ 540.905124][T10199] bridge_slave_0: entered promiscuous mode [ 540.919748][T10199] bridge0: port 2(bridge_slave_1) entered blocking state [ 540.919796][T10199] bridge0: port 2(bridge_slave_1) entered disabled state [ 540.919886][T10199] bridge_slave_1: entered allmulticast mode [ 540.926474][T10199] bridge_slave_1: entered promiscuous mode [ 540.955203][T10289] vcan0: tx drop: invalid sa for name 0x0000000020000000 [ 541.098463][T10199] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 541.108568][T10199] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 541.177787][T10183] hsr_slave_0: entered promiscuous mode [ 541.178486][T10183] hsr_slave_1: entered promiscuous mode [ 541.181054][T10183] debugfs: 'hsr0' already exists in 'hsr' [ 541.181067][T10183] Cannot create hsr debugfs directory [ 541.226109][T10199] team0: Port device team_slave_0 added [ 541.248645][ T5627] Bluetooth: hci17: command tx timeout [ 541.259134][T10300] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53608 sclass=netlink_route_socket pid=10300 comm=syz.8.893 [ 541.267032][T10199] team0: Port device team_slave_1 added [ 541.484495][ T6365] usb 10-1: new full-speed USB device number 2 using dummy_hcd [ 541.488335][T10199] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 541.488346][T10199] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 541.488361][T10199] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 541.489531][T10199] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 541.489540][T10199] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 541.489556][T10199] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 541.635868][ T6365] usb 10-1: unable to get BOS descriptor or descriptor too short [ 541.636289][ T6365] usb 10-1: not running at top speed; connect to a high speed hub [ 541.637122][ T6365] usb 10-1: config 160 has an invalid interface number: 187 but max is 0 [ 541.637143][ T6365] usb 10-1: config 160 has no interface number 0 [ 541.637166][ T6365] usb 10-1: config 160 interface 187 altsetting 8 has an endpoint descriptor with address 0xF4, changing to 0x84 [ 541.637183][ T6365] usb 10-1: config 160 interface 187 altsetting 8 endpoint 0x84 has invalid maxpacket 49717, setting to 64 [ 541.637199][ T6365] usb 10-1: config 160 interface 187 altsetting 8 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 541.637215][ T6365] usb 10-1: config 160 interface 187 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 541.637228][ T6365] usb 10-1: config 160 interface 187 altsetting 8 has a duplicate endpoint with address 0x7, skipping [ 541.637242][ T6365] usb 10-1: config 160 interface 187 altsetting 8 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 541.637260][ T6365] usb 10-1: config 160 interface 187 altsetting 8 has an endpoint descriptor with address 0xE9, changing to 0x89 [ 541.637274][ T6365] usb 10-1: config 160 interface 187 altsetting 8 endpoint 0x89 has invalid maxpacket 18397, setting to 64 [ 541.637289][ T6365] usb 10-1: config 160 interface 187 altsetting 8 has 8 endpoint descriptors, different from the interface descriptor's value: 6 [ 541.637305][ T6365] usb 10-1: config 160 interface 187 has no altsetting 0 [ 541.638968][ T6365] usb 10-1: New USB device found, idVendor=0caa, idProduct=3001, bcdDevice=3e.c2 [ 541.638984][ T6365] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.639010][ T6365] usb 10-1: Product: syz [ 541.639019][ T6365] usb 10-1: Manufacturer: syz [ 541.639028][ T6365] usb 10-1: SerialNumber: syz [ 541.649369][ T5727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.649779][ T5727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.782660][T10299] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 541.782778][T10299] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 541.782930][T10299] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 541.963315][ T5627] Bluetooth: hci18: command tx timeout [ 542.824768][T10199] hsr_slave_0: entered promiscuous mode [ 542.853814][T10199] hsr_slave_1: entered promiscuous mode [ 542.864672][T10199] debugfs: 'hsr0' already exists in 'hsr' [ 542.864687][T10199] Cannot create hsr debugfs directory [ 543.274803][ T6365] pl2303 10-1:160.187: pl2303 converter detected [ 543.274964][ T6365] pl2303 10-1:160.187: unknown device type, please report to linux-usb@vger.kernel.org [ 543.290999][T10312] FAULT_INJECTION: forcing a failure. [ 543.290999][T10312] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 543.291028][T10312] CPU: 0 UID: 0 PID: 10312 Comm: syz.7.902 Tainted: G L syzkaller #0 PREEMPT(full) [ 543.291045][T10312] Tainted: [L]=SOFTLOCKUP [ 543.291049][T10312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 543.291056][T10312] Call Trace: [ 543.291060][T10312] [ 543.291065][T10312] dump_stack_lvl+0x100/0x190 [ 543.291084][T10312] should_fail_ex.cold+0x5/0xa [ 543.291099][T10312] _copy_from_user+0x2e/0xd0 [ 543.291117][T10312] __sys_bpf+0x2f5/0x4e80 [ 543.291134][T10312] ? __pfx___sys_bpf+0x10/0x10 [ 543.291145][T10312] ? find_held_lock+0x2b/0x80 [ 543.291163][T10312] ? get_pid_task+0xfc/0x250 [ 543.291182][T10312] ? get_pid_task+0xfc/0x250 [ 543.291205][T10312] ? find_held_lock+0x2b/0x80 [ 543.291226][T10312] ? rcu_read_lock_any_held+0x6a/0xa0 [ 543.291237][T10312] ? find_held_lock+0x2b/0x80 [ 543.291255][T10312] ? ksys_write+0x190/0x250 [ 543.291273][T10312] ? ksys_write+0x190/0x250 [ 543.291301][T10312] ? fput+0x79/0x100 [ 543.291317][T10312] ? __x64_sys_bpf+0xce/0x140 [ 543.291329][T10312] __x64_sys_bpf+0xce/0x140 [ 543.291341][T10312] ? do_syscall_64+0x90/0x870 [ 543.291356][T10312] do_syscall_64+0x115/0x870 [ 543.291368][T10312] ? clear_bhb_loop+0x40/0x90 [ 543.291383][T10312] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.291395][T10312] RIP: 0033:0x7fe89ab9de99 [ 543.291407][T10312] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 543.291418][T10312] RSP: 002b:00007fe89ba0d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 543.291429][T10312] RAX: ffffffffffffffda RBX: 00007fe89ae26180 RCX: 00007fe89ab9de99 [ 543.291437][T10312] RDX: 0000000000000038 RSI: 0000200000000000 RDI: 000000000000001b [ 543.291444][T10312] RBP: 00007fe89ba0d090 R08: 0000000000000000 R09: 0000000000000000 [ 543.291451][T10312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 543.291458][T10312] R13: 00007fe89ae26218 R14: 00007fe89ae26180 R15: 00007fffe26bee68 [ 543.291473][T10312] [ 544.098892][ T6365] usb 10-1: USB disconnect, device number 2 [ 544.273307][ T29] audit: type=1400 audit(1785242417.390:616): avc: denied { setopt } for pid=10314 comm="syz.9.903" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 544.429886][T10319] netlink: 'syz.7.905': attribute type 1 has an invalid length. [ 544.835930][T10326] netlink: 'syz.9.907': attribute type 1 has an invalid length. [ 545.060243][T10183] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.193029][ T6365] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 545.370024][ T6365] usb 10-1: Using ep0 maxpacket: 8 [ 545.373171][ T6365] usb 10-1: config 0 has no interfaces? [ 545.382304][ T6365] usb 10-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 545.382322][ T6365] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.382333][ T6365] usb 10-1: Product: syz [ 545.382344][ T6365] usb 10-1: Manufacturer: syz [ 545.382353][ T6365] usb 10-1: SerialNumber: syz [ 545.388341][ T6365] usb 10-1: config 0 descriptor?? [ 545.401750][T10183] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.666929][T10183] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.755933][T10183] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.818780][T10346] blktrace: Concurrent blktraces are not allowed on loop16 [ 546.152345][ T1235] usb 10-1: USB disconnect, device number 3 [ 546.289182][ T6365] net_ratelimit: 25 callbacks suppressed [ 546.289193][ T6365] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.289425][ T6365] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.289826][ T6365] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.289924][ T5727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.304973][T10183] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 546.319514][T10183] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 546.319977][T10183] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 546.328357][T10183] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 546.329053][T10183] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 546.343034][T10183] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 546.344058][T10183] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 546.346174][T10183] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 546.445338][T10199] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.556188][ T9900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.580148][T10199] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.636441][T10183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 546.685746][T10199] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.769290][ T1235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.244250][ T1235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.244322][ T1235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.244465][ T1235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.326222][ T5727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.597735][T10360] netlink: 56 bytes leftover after parsing attributes in process `syz.9.911'. [ 548.245535][T10363] netlink: 'syz.8.912': attribute type 1 has an invalid length. [ 548.245549][T10363] netlink: 'syz.8.912': attribute type 4 has an invalid length. [ 548.245557][T10363] netlink: 9462 bytes leftover after parsing attributes in process `syz.8.912'. [ 548.248283][T10183] 8021q: adding VLAN 0 to HW filter on device team0 [ 548.396531][ T29] audit: type=1400 audit(1785242421.510:617): avc: denied { bind } for pid=10365 comm="syz.7.913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 548.429432][T10199] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.600551][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 548.600605][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 548.622072][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 548.622125][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 548.862879][T10366] syzkaller0: entered promiscuous mode [ 548.862895][T10366] syzkaller0: entered allmulticast mode [ 550.238192][T10395] FAULT_INJECTION: forcing a failure. [ 550.238192][T10395] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 550.238217][T10395] CPU: 0 UID: 0 PID: 10395 Comm: syz.8.917 Tainted: G L syzkaller #0 PREEMPT(full) [ 550.238235][T10395] Tainted: [L]=SOFTLOCKUP [ 550.238239][T10395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 550.238246][T10395] Call Trace: [ 550.238250][T10395] [ 550.238255][T10395] dump_stack_lvl+0x100/0x190 [ 550.238273][T10395] should_fail_ex.cold+0x5/0xa [ 550.238289][T10395] copy_fpstate_to_sigframe+0x82d/0xae0 [ 550.238307][T10395] ? __pfx_copy_fpstate_to_sigframe+0x10/0x10 [ 550.238324][T10395] ? posixtimer_deliver_signal+0x19d/0x6e0 [ 550.238344][T10395] ? x86_task_fpu+0x5f/0x90 [ 550.238357][T10395] get_sigframe+0x3fb/0x940 [ 550.238373][T10395] ? __pfx_get_sigframe+0x10/0x10 [ 550.238384][T10395] ? rcu_is_watching+0x12/0xc0 [ 550.238403][T10395] ? siginfo_layout+0x156/0x290 [ 550.238421][T10395] x64_setup_rt_frame+0x12f/0xce0 [ 550.238437][T10395] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 550.238454][T10395] arch_do_signal_or_restart+0x5ee/0x7e0 [ 550.238468][T10395] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 550.238491][T10395] ? fput+0x79/0x100 [ 550.238508][T10395] exit_to_user_mode_loop+0x139/0x6f0 [ 550.238524][T10395] ? rcu_is_watching+0x12/0xc0 [ 550.238542][T10395] do_syscall_64+0x666/0x870 [ 550.238556][T10395] ? clear_bhb_loop+0x40/0x90 [ 550.238571][T10395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 550.238583][T10395] RIP: 0033:0x7f6e5e15e6ce [ 550.238593][T10395] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 550.238604][T10395] RSP: 002b:00007f6e5ef96fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 550.238616][T10395] RAX: 0000000000000001 RBX: 00007f6e5ef976c0 RCX: 00007f6e5e15e6ce [ 550.238624][T10395] RDX: 0000000000000001 RSI: 00007f6e5ef97090 RDI: 0000000000000008 [ 550.238631][T10395] RBP: 00007f6e5ef97090 R08: 0000000000000000 R09: 0000000000000000 [ 550.238637][T10395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 550.238644][T10395] R13: 00007f6e5e426128 R14: 00007f6e5e426090 R15: 00007fff8587a7f8 [ 550.238660][T10395] [ 550.254809][T10397] comedi comedi3: c6xdigio: a I/O base address must be specified [ 550.405697][T10401] netlink: 'syz.7.919': attribute type 3 has an invalid length. [ 550.405724][T10401] netlink: 12 bytes leftover after parsing attributes in process `syz.7.919'. [ 550.405735][T10401] netlink: 'syz.7.919': attribute type 3 has an invalid length. [ 550.405743][T10401] netlink: 12 bytes leftover after parsing attributes in process `syz.7.919'. [ 550.406049][T10401] netlink: 4 bytes leftover after parsing attributes in process `syz.7.919'. [ 550.408055][T10199] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 550.425889][T10199] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 550.426340][T10199] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 550.448089][T10199] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 550.450441][T10199] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 550.466213][T10199] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 550.466674][T10199] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 550.479501][T10199] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 550.827160][T10199] 8021q: adding VLAN 0 to HW filter on device bond0 [ 550.868895][T10199] 8021q: adding VLAN 0 to HW filter on device team0 [ 550.876313][ T1053] bridge0: port 1(bridge_slave_0) entered blocking state [ 550.876366][ T1053] bridge0: port 1(bridge_slave_0) entered forwarding state [ 550.887845][ T9900] bridge0: port 2(bridge_slave_1) entered blocking state [ 550.887911][ T9900] bridge0: port 2(bridge_slave_1) entered forwarding state [ 551.366122][ T13] net_ratelimit: 22 callbacks suppressed [ 551.366133][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 551.489841][T10183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 551.566187][ T1235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 551.608673][T10183] veth0_vlan: entered promiscuous mode [ 551.630852][T10183] veth1_vlan: entered promiscuous mode [ 551.708122][T10183] veth0_macvtap: entered promiscuous mode [ 551.720756][T10183] veth1_macvtap: entered promiscuous mode [ 551.746733][T10183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 551.760810][T10183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 551.781596][T10255] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.781627][T10255] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.781648][T10255] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.781668][T10255] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.994909][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 551.994922][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 552.792880][ T5727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.792945][ T5727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.793183][ T5727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.793808][ T5727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.794019][ T5727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 552.900352][ T1053] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 552.900366][ T1053] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 552.950597][T10199] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 553.040548][T10199] veth0_vlan: entered promiscuous mode [ 553.057949][T10199] veth1_vlan: entered promiscuous mode [ 553.120767][T10199] veth0_macvtap: entered promiscuous mode [ 553.126888][T10199] veth1_macvtap: entered promiscuous mode [ 553.159920][T10199] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 553.161977][T10199] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 553.177601][ T1053] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.177690][ T1053] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.177711][ T1053] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.177730][ T1053] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.203269][T10307] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.323594][ T6616] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.323657][ T6616] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.354182][ T165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 553.354196][ T165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 553.439775][ T165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 553.439789][ T165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 554.233056][ T192] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 554.385109][ T192] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 554.385156][ T192] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 554.385171][ T192] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 554.387392][ T192] usb 1-1: config 0 descriptor?? [ 554.609018][T10447] FAULT_INJECTION: forcing a failure. [ 554.609018][T10447] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 554.609042][T10447] CPU: 0 UID: 0 PID: 10447 Comm: syz.0.925 Tainted: G L syzkaller #0 PREEMPT(full) [ 554.609059][T10447] Tainted: [L]=SOFTLOCKUP [ 554.609063][T10447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 554.609072][T10447] Call Trace: [ 554.609076][T10447] [ 554.609080][T10447] dump_stack_lvl+0x100/0x190 [ 554.609098][T10447] should_fail_ex.cold+0x5/0xa [ 554.609114][T10447] copy_fpstate_to_sigframe+0x82d/0xae0 [ 554.609129][T10447] ? do_raw_spin_lock+0x128/0x260 [ 554.609148][T10447] ? __pfx_copy_fpstate_to_sigframe+0x10/0x10 [ 554.609172][T10447] ? posixtimer_deliver_signal+0x19d/0x6e0 [ 554.609191][T10447] ? x86_task_fpu+0x5f/0x90 [ 554.609204][T10447] get_sigframe+0x3fb/0x940 [ 554.609220][T10447] ? __pfx_get_sigframe+0x10/0x10 [ 554.609237][T10447] ? rcu_is_watching+0x12/0xc0 [ 554.609257][T10447] ? siginfo_layout+0x156/0x290 [ 554.609275][T10447] x64_setup_rt_frame+0x12f/0xce0 [ 554.609291][T10447] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 554.609309][T10447] arch_do_signal_or_restart+0x5ee/0x7e0 [ 554.609323][T10447] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 554.609340][T10447] ? fput+0x79/0x100 [ 554.609358][T10447] exit_to_user_mode_loop+0x139/0x6f0 [ 554.609373][T10447] ? rcu_is_watching+0x12/0xc0 [ 554.609392][T10447] do_syscall_64+0x666/0x870 [ 554.609406][T10447] ? clear_bhb_loop+0x40/0x90 [ 554.609420][T10447] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 554.609432][T10447] RIP: 0033:0x7f77ec35e6ce [ 554.609442][T10447] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 554.609454][T10447] RSP: 002b:00007f77ea5f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 554.609465][T10447] RAX: 0000000000000001 RBX: 00007f77ea5f66c0 RCX: 00007f77ec35e6ce [ 554.609473][T10447] RDX: 0000000000000001 RSI: 00007f77ea5f6090 RDI: 0000000000000004 [ 554.609479][T10447] RBP: 00007f77ea5f6090 R08: 0000000000000000 R09: 0000000000000000 [ 554.609486][T10447] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 554.609493][T10447] R13: 00007f77ec626038 R14: 00007f77ec625fa0 R15: 00007ffe637e5fb8 [ 554.609508][T10447] [ 554.612608][ T6365] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 554.629876][ T192] usbhid 1-1:0.0: can't add hid device: -71 [ 554.629949][ T192] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 554.640379][ T192] usb 1-1: USB disconnect, device number 20 [ 555.771415][ T6365] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 555.771437][ T6365] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 555.771453][ T6365] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 555.880948][T10457] comedi comedi3: c6xdigio: a I/O base address must be specified [ 555.921355][ T6365] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 555.921374][ T6365] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.921386][ T6365] usb 3-1: Product: syz [ 555.921395][ T6365] usb 3-1: Manufacturer: syz [ 555.921405][ T6365] usb 3-1: SerialNumber: syz [ 555.926278][ T6365] usb 3-1: config 0 descriptor?? [ 555.930083][T10451] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 555.930159][T10451] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 555.950646][ T6365] usb 3-1: ucan: probing device on interface #0 [ 556.358648][ T165] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.459249][ T165] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.558469][ T165] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.647936][ T165] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.666399][ T6365] ucan 3-1:0.0 can0: registered device [ 556.689255][ T6616] net_ratelimit: 15 callbacks suppressed [ 556.689266][ T6616] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 556.689525][ T6616] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 556.689750][ T6616] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 556.689814][ T6616] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 556.842103][ T5625] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 556.849020][ T5625] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 556.850026][ T5625] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 556.850557][ T5625] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 556.851438][ T5625] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 556.999580][ T165] bridge_slave_1: left allmulticast mode [ 556.999598][ T165] bridge_slave_1: left promiscuous mode [ 557.000234][ T165] bridge0: port 2(bridge_slave_1) entered disabled state [ 557.041045][ T165] bridge_slave_0: left allmulticast mode [ 557.041061][ T165] bridge_slave_0: left promiscuous mode [ 557.041173][ T165] bridge0: port 1(bridge_slave_0) entered disabled state [ 557.203460][T10466] netlink: 16 bytes leftover after parsing attributes in process `syz.7.932'. [ 557.258366][T10469] netlink: 'syz.7.932': attribute type 16 has an invalid length. [ 557.258380][T10469] netlink: 'syz.7.932': attribute type 17 has an invalid length. [ 557.390383][ T1053] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.479593][ T165] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 557.484328][ T165] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 557.486091][ T165] bond0 (unregistering): Released all slaves [ 557.643315][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.647432][ T1235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.732737][ T6365] ucan 3-1:0.0 can0: firmware string: unknown [ 557.748217][ T6365] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.748271][ T6365] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.748485][ T6365] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.767439][ T29] audit: type=1400 audit(1785242430.880:618): avc: denied { write } for pid=10464 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 558.029234][ T29] audit: type=1400 audit(1785242431.140:619): avc: denied { write } for pid=10480 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 558.055134][ T6365] usb 3-1: USB disconnect, device number 8 [ 558.232730][T10482] netlink: 8 bytes leftover after parsing attributes in process `syz.7.933'. [ 558.232758][T10482] tipc: Enabling of bearer rejected, media not registered [ 558.235898][ T5274] 8021q: adding VLAN 0 to HW filter on device eth1 [ 558.347604][ T165] hsr_slave_0: left promiscuous mode [ 558.350762][ T165] hsr_slave_1: left promiscuous mode [ 558.351187][ T165] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 558.351200][ T165] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 558.398480][ T165] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 558.398494][ T165] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 558.456576][ T165] veth1_macvtap: left promiscuous mode [ 558.456601][ T165] veth0_macvtap: left promiscuous mode [ 558.456697][ T165] veth1_vlan: left promiscuous mode [ 558.456731][ T165] veth0_vlan: left promiscuous mode [ 558.926686][ T5625] Bluetooth: hci18: command tx timeout [ 559.181352][ T29] audit: type=1400 audit(1785242432.290:620): avc: denied { write } for pid=10490 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 559.184887][ T165] team0 (unregistering): Port device team_slave_1 removed [ 559.219117][ T165] team0 (unregistering): Port device team_slave_0 removed [ 559.426466][ T29] audit: type=1400 audit(1785242432.540:621): avc: denied { write } for pid=10508 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 559.673180][ T5274] 8021q: adding VLAN 0 to HW filter on device eth2 [ 560.305724][ T29] audit: type=1400 audit(1785242433.420:622): avc: denied { create } for pid=10511 comm="syz.2.935" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 560.648957][T10459] bridge0: port 1(bridge_slave_0) entered blocking state [ 560.649109][T10459] bridge0: port 1(bridge_slave_0) entered disabled state [ 560.649211][T10459] bridge_slave_0: entered allmulticast mode [ 560.657266][T10459] bridge_slave_0: entered promiscuous mode [ 560.667479][T10459] bridge0: port 2(bridge_slave_1) entered blocking state [ 560.668789][T10459] bridge0: port 2(bridge_slave_1) entered disabled state [ 560.668944][T10459] bridge_slave_1: entered allmulticast mode [ 560.689251][T10459] bridge_slave_1: entered promiscuous mode [ 560.749140][ T29] audit: type=1400 audit(1785242433.860:623): avc: denied { write } for pid=10513 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 560.782431][T10459] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 560.793084][T10459] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 560.935221][T10459] team0: Port device team_slave_0 added [ 560.944230][T10459] team0: Port device team_slave_1 added [ 561.004311][ T5627] Bluetooth: hci18: command tx timeout [ 561.024506][T10459] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 561.024516][T10459] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 561.024532][T10459] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 561.025546][T10459] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 561.025555][T10459] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 561.025571][T10459] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 561.036774][ T29] audit: type=1400 audit(1785242434.150:624): avc: denied { write } for pid=10533 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 561.158185][T10459] hsr_slave_0: entered promiscuous mode [ 561.158854][T10459] hsr_slave_1: entered promiscuous mode [ 561.166874][T10459] debugfs: 'hsr0' already exists in 'hsr' [ 561.166887][T10459] Cannot create hsr debugfs directory [ 561.169009][ T5274] 8021q: adding VLAN 0 to HW filter on device eth3 [ 561.415685][ T29] audit: type=1400 audit(1785242434.530:625): avc: denied { create } for pid=10537 comm="syz.2.937" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 561.426685][ T29] audit: type=1400 audit(1785242434.540:626): avc: denied { bind } for pid=10537 comm="syz.2.937" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 561.575298][T10459] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.735178][T10459] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.763886][ T29] audit: type=1400 audit(1785242434.870:627): avc: denied { write } for pid=10540 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 561.824814][ T59] net_ratelimit: 22 callbacks suppressed [ 561.824825][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 561.886818][ T192] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 561.886873][ T192] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 561.887046][ T192] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 561.887263][ T192] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 561.926322][T10538] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.019444][T10459] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.029779][ T5274] 8021q: adding VLAN 0 to HW filter on device eth4 [ 562.117102][T10538] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.129627][ T192] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.160518][T10459] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.239676][T10538] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.381762][T10538] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.452918][ T192] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.453055][ T192] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.453103][ T192] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.565988][T10459] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 562.573214][T10459] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 562.573819][T10459] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 562.580353][T10459] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 562.581459][T10459] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 562.587643][T10459] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 562.588151][T10459] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 562.590026][T10459] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 562.716351][T10459] 8021q: adding VLAN 0 to HW filter on device bond0 [ 562.717130][ T9102] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.755731][T10459] 8021q: adding VLAN 0 to HW filter on device team0 [ 562.756210][ T59] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.759270][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 562.759322][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 562.770225][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.778787][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.778818][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.799483][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 562.799535][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 562.812041][T10459] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 562.812055][T10459] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 562.850125][ T1053] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.891927][T10255] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 563.084915][ T5627] Bluetooth: hci18: command tx timeout [ 564.639112][ T5625] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 564.641294][ T5625] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 564.641812][ T5625] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 564.642258][ T5625] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 564.642887][ T5625] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 564.727597][ T5627] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 564.732009][ T5627] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 564.732493][ T5627] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 564.741509][ T5627] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 564.741820][ T5627] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 564.767560][T10459] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 564.865590][T10459] veth0_vlan: entered promiscuous mode [ 564.900800][T10459] veth1_vlan: entered promiscuous mode [ 564.969000][T10459] veth0_macvtap: entered promiscuous mode [ 564.988301][T10459] veth1_macvtap: entered promiscuous mode [ 565.036289][T10459] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 565.056762][T10459] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 565.068470][ T1053] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.068502][ T1053] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.068524][ T1053] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.068544][ T1053] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.164487][ T5625] Bluetooth: hci18: command tx timeout [ 565.187017][T10459] ieee80211 phy48: Selected rate control algorithm 'minstrel_ht' [ 565.489399][ T5625] Bluetooth: hci17: Controller not accepting commands anymore: ncmd = 0 [ 565.489457][ T5625] Bluetooth: hci17: Injecting HCI hardware error event [ 565.490602][ T5625] Bluetooth: hci17: hardware error 0x00 [ 566.641353][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 566.641368][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 566.660324][T10459] ieee80211 phy49: Selected rate control algorithm 'minstrel_ht' [ 566.685944][ T5627] Bluetooth: hci16: command tx timeout [ 566.755889][ T165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 566.755903][ T165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 566.774168][ T5627] Bluetooth: hci19: command tx timeout [ 566.811288][T10603] netlink: 56 bytes leftover after parsing attributes in process `syz.2.942'. [ 567.060973][T10613] RDS: rds_bind could not find a transport for ::ffff:10.1.1.1, load rds_tcp or rds_rdma? [ 567.061312][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 567.061321][ T29] audit: type=1400 audit(1785242440.170:629): avc: denied { write } for pid=10612 comm="syz.1.931" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 567.072228][ T29] audit: type=1400 audit(1785242440.180:630): avc: denied { listen } for pid=10612 comm="syz.1.931" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 567.089999][ T29] audit: type=1400 audit(1785242440.200:631): avc: denied { relabelfrom } for pid=10612 comm="syz.1.931" name="NETLINK" dev="sockfs" ino=41338 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 567.137492][T10615] FAULT_INJECTION: forcing a failure. [ 567.137492][T10615] name failslab, interval 1, probability 0, space 0, times 0 [ 567.137531][T10615] CPU: 0 UID: 0 PID: 10615 Comm: syz.2.943 Tainted: G L syzkaller #0 PREEMPT(full) [ 567.137548][T10615] Tainted: [L]=SOFTLOCKUP [ 567.137552][T10615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 567.137560][T10615] Call Trace: [ 567.137563][T10615] [ 567.137568][T10615] dump_stack_lvl+0x100/0x190 [ 567.137586][T10615] should_fail_ex.cold+0x5/0xa [ 567.137602][T10615] should_failslab+0xc2/0x120 [ 567.137618][T10615] kmem_cache_alloc_noprof+0x91/0x6a0 [ 567.137632][T10615] ? alloc_vfsmnt+0x23/0x710 [ 567.137651][T10615] alloc_vfsmnt+0x23/0x710 [ 567.137671][T10615] __do_sys_fsmount+0x5a0/0xed0 [ 567.137686][T10615] ? fput+0x79/0x100 [ 567.137699][T10615] ? __pfx___do_sys_fsmount+0x10/0x10 [ 567.137713][T10615] ? ksys_write+0x1ac/0x250 [ 567.137737][T10615] do_syscall_64+0x115/0x870 [ 567.137750][T10615] ? clear_bhb_loop+0x40/0x90 [ 567.137765][T10615] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 567.137777][T10615] RIP: 0033:0x7f54a7d9de99 [ 567.137787][T10615] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 567.137798][T10615] RSP: 002b:00007f54a8c1f028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b0 [ 567.137810][T10615] RAX: ffffffffffffffda RBX: 00007f54a8025fa0 RCX: 00007f54a7d9de99 [ 567.137818][T10615] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000007 [ 567.137825][T10615] RBP: 00007f54a8c1f090 R08: 0000000000000000 R09: 0000000000000000 [ 567.137832][T10615] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 567.137838][T10615] R13: 00007f54a8026038 R14: 00007f54a8025fa0 R15: 00007ffc671f65d8 [ 567.137854][T10615] [ 567.173745][ T1235] net_ratelimit: 24 callbacks suppressed [ 567.173755][ T1235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 567.507859][ T29] audit: type=1400 audit(1785242440.620:632): avc: denied { audit_write } for pid=10619 comm="syz.2.944" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 567.577598][ T1235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 567.577961][ T1235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 567.578011][ T1235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 567.578182][ T1235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 567.795770][T10255] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 567.937130][T10592] bridge0: port 1(bridge_slave_0) entered blocking state [ 567.937226][T10592] bridge0: port 1(bridge_slave_0) entered disabled state [ 567.937434][T10592] bridge_slave_0: entered allmulticast mode [ 567.940029][T10592] bridge_slave_0: entered promiscuous mode [ 567.989141][T10592] bridge0: port 2(bridge_slave_1) entered blocking state [ 567.989197][T10592] bridge0: port 2(bridge_slave_1) entered disabled state [ 567.989288][T10592] bridge_slave_1: entered allmulticast mode [ 567.990241][T10592] bridge_slave_1: entered promiscuous mode [ 568.041304][T10647] netlink: 'syz.2.948': attribute type 1 has an invalid length. [ 568.088762][T10588] bridge0: port 1(bridge_slave_0) entered blocking state [ 568.088812][T10588] bridge0: port 1(bridge_slave_0) entered disabled state [ 568.088915][T10588] bridge_slave_0: entered allmulticast mode [ 568.089868][T10588] bridge_slave_0: entered promiscuous mode [ 568.093383][T10588] bridge0: port 2(bridge_slave_1) entered blocking state [ 568.093444][T10588] bridge0: port 2(bridge_slave_1) entered disabled state [ 568.093546][T10588] bridge_slave_1: entered allmulticast mode [ 568.096078][T10588] bridge_slave_1: entered promiscuous mode [ 568.138882][T10592] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 568.141863][T10592] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 568.207929][T10588] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 568.220684][T10588] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 568.237274][T10592] team0: Port device team_slave_0 added [ 568.267323][T10588] team0: Port device team_slave_0 added [ 568.269035][T10588] team0: Port device team_slave_1 added [ 568.270282][T10592] team0: Port device team_slave_1 added [ 568.331928][T10592] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 568.331938][T10592] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 568.331954][T10592] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 568.336312][T10592] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 568.336321][T10592] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 568.336337][T10592] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 568.352265][T10588] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 568.352275][T10588] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 568.352291][T10588] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 568.369888][T10588] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 568.369898][T10588] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 568.369913][T10588] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 568.410352][T10592] hsr_slave_0: entered promiscuous mode [ 568.420061][ T1235] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 568.420505][T10592] hsr_slave_1: entered promiscuous mode [ 568.421054][T10592] debugfs: 'hsr0' already exists in 'hsr' [ 568.421081][T10592] Cannot create hsr debugfs directory [ 568.491078][T10588] hsr_slave_0: entered promiscuous mode [ 568.491762][T10588] hsr_slave_1: entered promiscuous mode [ 568.492217][T10588] debugfs: 'hsr0' already exists in 'hsr' [ 568.492230][T10588] Cannot create hsr debugfs directory [ 568.587922][ T1235] usb 3-1: Using ep0 maxpacket: 8 [ 568.606683][ T5719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 568.606864][ T5719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 568.606907][ T5719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 568.606953][ T5719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 568.610670][ T5625] Bluetooth: hci17: Opcode 0x0c03 failed: -110 [ 568.631438][ T1235] usb 3-1: config 0 has no interfaces? [ 568.642382][ T1235] usb 3-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 568.642400][ T1235] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.642412][ T1235] usb 3-1: Product: syz [ 568.642421][ T1235] usb 3-1: Manufacturer: syz [ 568.642430][ T1235] usb 3-1: SerialNumber: syz [ 568.643995][ T1235] usb 3-1: config 0 descriptor?? [ 568.769739][ T5625] Bluetooth: hci16: command tx timeout [ 568.843224][ T5625] Bluetooth: hci19: command tx timeout [ 568.905499][T10653] netlink: 16 bytes leftover after parsing attributes in process `syz.1.949'. [ 568.905620][T10651] netlink: 16 bytes leftover after parsing attributes in process `syz.1.949'. [ 569.015195][ T1235] usb 3-1: USB disconnect, device number 9 [ 569.165578][T10592] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.265774][T10592] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.279433][ T29] audit: type=1400 audit(1785242442.390:633): avc: denied { ioctl } for pid=10658 comm="syz.1.951" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 ioctlcmd=0x943c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 569.348036][T10592] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.435799][T10592] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.450180][T10663] syzkaller0: entered promiscuous mode [ 569.450193][T10663] syzkaller0: entered allmulticast mode [ 569.823975][ T6748] kernel read not supported for file /28/net/packet (pid: 6748 comm: kworker/0:10) [ 569.940589][ T29] audit: type=1400 audit(1785242443.050:634): avc: denied { name_bind } for pid=10673 comm="syz.1.956" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 569.945658][T10674] fuse: Bad value for 'user_id' [ 569.945670][T10674] fuse: Bad value for 'user_id' [ 570.043124][ T5625] Bluetooth: hci3: command 0x0406 tx timeout [ 570.043149][ T5625] Bluetooth: hci7: command 0x0406 tx timeout [ 570.894486][ T9845] Bluetooth: hci16: command tx timeout [ 570.923375][ T9845] Bluetooth: hci19: command tx timeout [ 570.973178][T10592] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 571.057529][T10592] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 571.061411][T10592] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 571.081433][T10592] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 571.081882][T10592] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 571.129640][T10592] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 571.130415][T10592] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 571.134387][T10592] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 571.156639][ T29] audit: type=1400 audit(1785242444.270:635): avc: denied { ioctl } for pid=10679 comm="syz.2.958" path="/dev/binderfs/binder0" dev="binder" ino=61 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 571.158040][ T29] audit: type=1400 audit(1785242444.270:636): avc: denied { set_context_mgr } for pid=10679 comm="syz.2.958" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 571.196470][ T29] audit: type=1400 audit(1785242444.310:637): avc: denied { map } for pid=10679 comm="syz.2.958" path="/dev/binderfs/binder0" dev="binder" ino=61 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 571.196505][ T29] audit: type=1400 audit(1785242444.310:638): avc: denied { call } for pid=10679 comm="syz.2.958" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 571.196820][T10680] FAULT_INJECTION: forcing a failure. [ 571.196820][T10680] name failslab, interval 1, probability 0, space 0, times 0 [ 571.196840][T10680] CPU: 0 UID: 0 PID: 10680 Comm: syz.2.958 Tainted: G L syzkaller #0 PREEMPT(full) [ 571.196857][T10680] Tainted: [L]=SOFTLOCKUP [ 571.196861][T10680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 571.196869][T10680] Call Trace: [ 571.196872][T10680] [ 571.196877][T10680] dump_stack_lvl+0x100/0x190 [ 571.196896][T10680] should_fail_ex.cold+0x5/0xa [ 571.196911][T10680] should_failslab+0xc2/0x120 [ 571.196936][T10680] __kmalloc_noprof+0xfc/0x820 [ 571.196949][T10680] ? rcu_is_watching+0x12/0xc0 [ 571.196968][T10680] ? tomoyo_realpath_from_path+0xb6/0x690 [ 571.196987][T10680] tomoyo_realpath_from_path+0xb6/0x690 [ 571.197002][T10680] tomoyo_path_number_perm+0x23c/0x580 [ 571.197018][T10680] ? tomoyo_path_number_perm+0x22e/0x580 [ 571.197036][T10680] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 571.197069][T10680] ? find_held_lock+0x2b/0x80 [ 571.197087][T10680] ? __fget_files+0x215/0x3d0 [ 571.197098][T10680] ? hook_file_ioctl_common+0x140/0x440 [ 571.197112][T10680] ? __fget_files+0x215/0x3d0 [ 571.197126][T10680] ? __fget_files+0x21f/0x3d0 [ 571.197140][T10680] security_file_ioctl+0xd3/0x230 [ 571.197160][T10680] __x64_sys_ioctl+0xb7/0x210 [ 571.197179][T10680] do_syscall_64+0x115/0x870 [ 571.197192][T10680] ? clear_bhb_loop+0x40/0x90 [ 571.197207][T10680] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 571.197219][T10680] RIP: 0033:0x7f54a7d9de99 [ 571.197229][T10680] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 571.197241][T10680] RSP: 002b:00007f54a8c1f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 571.197256][T10680] RAX: ffffffffffffffda RBX: 00007f54a8025fa0 RCX: 00007f54a7d9de99 [ 571.197264][T10680] RDX: 0000200000000680 RSI: 00000000c0306201 RDI: 0000000000000005 [ 571.197271][T10680] RBP: 00007f54a8c1f090 R08: 0000000000000000 R09: 0000000000000000 [ 571.197278][T10680] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 571.197285][T10680] R13: 00007f54a8026038 R14: 00007f54a8025fa0 R15: 00007ffc671f65d8 [ 571.197300][T10680] [ 571.197313][T10680] ERROR: Out of memory at tomoyo_realpath_from_path. [ 571.197520][T10680] binder: 10679:10680 ioctl c0306201 200000000680 returned -14 [ 571.202312][T10588] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.353146][T10690] FAULT_INJECTION: forcing a failure. [ 571.353146][T10690] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 571.353169][T10690] CPU: 0 UID: 0 PID: 10690 Comm: syz.1.960 Tainted: G L syzkaller #0 PREEMPT(full) [ 571.353186][T10690] Tainted: [L]=SOFTLOCKUP [ 571.353190][T10690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 571.353197][T10690] Call Trace: [ 571.353201][T10690] [ 571.353205][T10690] dump_stack_lvl+0x100/0x190 [ 571.353223][T10690] should_fail_ex.cold+0x5/0xa [ 571.353238][T10690] _copy_from_user+0x2e/0xd0 [ 571.353256][T10690] copy_msghdr_from_user+0x9f/0x4c0 [ 571.353277][T10690] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 571.353303][T10690] ___sys_sendmsg+0x106/0x1e0 [ 571.353322][T10690] ? __pfx____sys_sendmsg+0x10/0x10 [ 571.353340][T10690] ? __lock_acquire+0x49f/0x1a40 [ 571.353355][T10690] ? get_pid_task+0x106/0x250 [ 571.353391][T10690] __sys_sendmsg+0x160/0x210 [ 571.353406][T10690] ? __pfx___sys_sendmsg+0x10/0x10 [ 571.353429][T10690] do_syscall_64+0x115/0x870 [ 571.353442][T10690] ? clear_bhb_loop+0x40/0x90 [ 571.353457][T10690] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 571.353469][T10690] RIP: 0033:0x7f8646f9de99 [ 571.353479][T10690] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 571.353490][T10690] RSP: 002b:00007f8647ea6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 571.353501][T10690] RAX: ffffffffffffffda RBX: 00007f8647225fa0 RCX: 00007f8646f9de99 [ 571.353509][T10690] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 571.353516][T10690] RBP: 00007f8647ea6090 R08: 0000000000000000 R09: 0000000000000000 [ 571.353523][T10690] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 571.353530][T10690] R13: 00007f8647226038 R14: 00007f8647225fa0 R15: 00007ffff23f51e8 [ 571.353545][T10690] [ 571.358435][T10588] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.603894][T10588] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.832924][ T6365] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 571.857064][T10588] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.907171][T10592] 8021q: adding VLAN 0 to HW filter on device bond0 [ 571.936310][T10592] 8021q: adding VLAN 0 to HW filter on device team0 [ 571.975544][ T9102] bridge0: port 1(bridge_slave_0) entered blocking state [ 571.975598][ T9102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 571.982023][T10255] bridge0: port 2(bridge_slave_1) entered blocking state [ 571.982075][T10255] bridge0: port 2(bridge_slave_1) entered forwarding state [ 572.088863][ T6365] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 572.088881][ T6365] usb 3-1: config 0 has no interface number 0 [ 572.088905][ T6365] usb 3-1: config 0 interface 41 has no altsetting 0 [ 572.169866][ T6365] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 572.169886][ T6365] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 572.169897][ T6365] usb 3-1: Product: syz [ 572.169907][ T6365] usb 3-1: Manufacturer: syz [ 572.169916][ T6365] usb 3-1: SerialNumber: syz [ 572.171903][ T6365] usb 3-1: config 0 descriptor?? [ 572.234729][ T9102] net_ratelimit: 21 callbacks suppressed [ 572.234740][ T9102] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 572.321828][T10588] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 572.360137][T10588] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 572.360654][T10588] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 572.377243][T10588] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 572.378692][T10588] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 572.387909][T10588] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 572.389415][T10588] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 572.409889][T10588] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 572.586670][T10588] 8021q: adding VLAN 0 to HW filter on device bond0 [ 572.621336][T10588] 8021q: adding VLAN 0 to HW filter on device team0 [ 572.629117][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 572.629176][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 572.634836][T10255] bridge0: port 2(bridge_slave_1) entered blocking state [ 572.634894][T10255] bridge0: port 2(bridge_slave_1) entered forwarding state [ 572.662627][ T9] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 572.835997][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 572.837343][ T9] usb 2-1: config 0 interface 0 altsetting 128 has an invalid descriptor for endpoint zero, skipping [ 572.837361][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 572.837380][ T9] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 572.837394][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 572.839317][ T9] usb 2-1: config 0 descriptor?? [ 572.930304][ T9845] Bluetooth: hci16: command tx timeout [ 573.017772][ T9845] Bluetooth: hci19: command tx timeout [ 573.044440][ T6365] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -71 [ 573.058567][ T6365] usb 3-1: USB disconnect, device number 10 [ 573.095526][ T5719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 573.096947][ T5719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 573.096999][ T5719] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 573.097407][ T6616] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 573.247362][T10699] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 573.247630][T10699] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 573.252898][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 573.252956][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 573.257732][ T9] usb 2-1: USB disconnect, device number 10 [ 573.279492][T10592] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 573.363229][T10307] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 573.644206][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 573.799536][ T29] audit: type=1400 audit(1785242446.910:639): avc: denied { write } for pid=10713 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 573.837734][ T5627] Bluetooth: hci20: unexpected cc 0x0c03 length: 249 > 1 [ 573.840871][ T5627] Bluetooth: hci20: unexpected cc 0x1003 length: 249 > 9 [ 573.841851][ T5627] Bluetooth: hci20: unexpected cc 0x1001 length: 249 > 9 [ 573.842887][ T5627] Bluetooth: hci20: unexpected cc 0x0c23 length: 249 > 4 [ 573.845635][ T5627] Bluetooth: hci20: unexpected cc 0x0c38 length: 249 > 2 [ 573.964618][ T1235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 574.086782][T10588] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 574.127204][ T5735] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 574.127587][ T5735] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 574.184561][T10592] veth0_vlan: entered promiscuous mode [ 574.240961][T10592] veth1_vlan: entered promiscuous mode [ 574.246000][ T29] audit: type=1400 audit(1785242447.360:640): avc: denied { write } for pid=10747 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 574.347431][ T29] audit: type=1400 audit(1785242447.460:641): avc: denied { read write } for pid=10750 comm="syz.2.964" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 574.347643][ T29] audit: type=1400 audit(1785242447.460:642): avc: denied { open } for pid=10750 comm="syz.2.964" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 574.349478][T10592] veth0_macvtap: entered promiscuous mode [ 574.361629][T10592] veth1_macvtap: entered promiscuous mode [ 574.460407][T10592] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 574.474895][T10592] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 574.533510][ T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.534387][ T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.534421][ T13] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.534442][ T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.637171][ T6365] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 574.659231][T10592] ieee80211 phy50: Selected rate control algorithm 'minstrel_ht' [ 574.798729][T10592] ieee80211 phy51: Selected rate control algorithm 'minstrel_ht' [ 574.799998][ T77] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 574.800011][ T77] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 574.812767][ T5735] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 574.913307][ T6365] usb 3-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 574.913325][ T6365] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 574.919895][ T77] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 574.919908][ T77] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 574.964997][ T5735] usb 2-1: Using ep0 maxpacket: 8 [ 574.966212][ T5735] usb 2-1: config index 0 descriptor too short (expected 6427, got 27) [ 574.966228][ T5735] usb 2-1: config 0 has an invalid interface number: 21 but max is 0 [ 574.966256][ T5735] usb 2-1: config 0 has no interface number 0 [ 574.966276][ T5735] usb 2-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 574.966292][ T5735] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 574.966307][ T5735] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 574.967460][ T5735] usb 2-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=c3.d4 [ 574.967490][ T5735] usb 2-1: New USB device strings: Mfr=78, Product=1, SerialNumber=0 [ 574.967503][ T5735] usb 2-1: Product: syz [ 574.967512][ T5735] usb 2-1: Manufacturer: syz [ 574.969113][ T5735] usb 2-1: config 0 descriptor?? [ 574.969848][T10766] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 574.982348][ T6365] usb 3-1: USB2VGA dongle found at address 11 [ 575.021577][ T6365] usb 3-1: Allocated 8 output buffers [ 575.086697][T10644] Bluetooth: hci8: command 0x0406 tx timeout [ 575.261196][ T6365] usb 3-1: Failed to early initialize device [ 575.269788][T10588] veth0_vlan: entered promiscuous mode [ 575.410854][ T6365] usb 3-1: USB disconnect, device number 11 [ 575.429515][T10588] veth1_vlan: entered promiscuous mode [ 575.882968][ T9845] Bluetooth: hci20: command tx timeout [ 577.013954][ T29] audit: type=1400 audit(1785242450.130:643): avc: denied { ioctl } for pid=10764 comm="syz.1.966" path="socket:[42855]" dev="sockfs" ino=42855 ioctlcmd=0x5872 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 577.029907][ T29] audit: type=1400 audit(1785242450.140:644): avc: denied { write } for pid=10764 comm="syz.1.966" name="configs" dev="configfs" ino=8896 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 577.031838][ T29] audit: type=1400 audit(1785242450.140:645): avc: denied { write } for pid=10764 comm="syz.1.966" name="functions" dev="configfs" ino=8895 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 577.035925][ T29] audit: type=1400 audit(1785242450.150:646): avc: denied { write } for pid=10764 comm="syz.1.966" name="c.1" dev="configfs" ino=42857 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 577.035955][ T29] audit: type=1400 audit(1785242450.150:647): avc: denied { write } for pid=10764 comm="syz.1.966" name="c.1" dev="configfs" ino=42857 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 577.089158][ T5735] usb 2-1: USB disconnect, device number 11 [ 577.136385][T10588] veth0_macvtap: entered promiscuous mode [ 577.158286][T10588] veth1_macvtap: entered promiscuous mode [ 577.371123][T10588] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 577.386839][ T29] audit: type=1400 audit(1785242450.500:648): avc: denied { write } for pid=10768 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 578.346368][ T9845] Bluetooth: hci20: command tx timeout [ 578.397830][ T5735] net_ratelimit: 16 callbacks suppressed [ 578.397842][ T5735] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 578.398213][ T5735] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 578.398257][ T5735] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 578.398305][ T5735] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 578.398348][ T5735] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 578.398873][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 578.398921][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 579.351564][T10255] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 580.362669][T10644] Bluetooth: hci20: command tx timeout [ 580.496180][T10588] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 580.533538][ T6365] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 580.533995][ T1235] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 580.677476][T10807] netlink: 36 bytes leftover after parsing attributes in process `syz.1.968'. [ 580.742206][ T3372] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.742246][ T3372] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.742269][ T3372] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.742289][ T3372] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.831768][ T29] audit: type=1400 audit(1785242453.940:649): avc: denied { write } for pid=10808 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 581.097952][T10588] ieee80211 phy52: Selected rate control algorithm 'minstrel_ht' [ 582.272868][ T9900] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 582.272883][ T9900] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 582.320553][T10588] ieee80211 phy53: Selected rate control algorithm 'minstrel_ht' [ 582.444281][T10644] Bluetooth: hci20: command tx timeout [ 582.490834][ T1053] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 582.490847][ T1053] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 582.847854][T10738] bridge0: port 1(bridge_slave_0) entered blocking state [ 582.847905][T10738] bridge0: port 1(bridge_slave_0) entered disabled state [ 582.848004][T10738] bridge_slave_0: entered allmulticast mode [ 582.854926][T10738] bridge_slave_0: entered promiscuous mode [ 582.904513][T10738] bridge0: port 2(bridge_slave_1) entered blocking state [ 582.904563][T10738] bridge0: port 2(bridge_slave_1) entered disabled state [ 582.904676][T10738] bridge_slave_1: entered allmulticast mode [ 582.923231][T10738] bridge_slave_1: entered promiscuous mode [ 583.071391][ T1235] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 583.095646][T10738] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 583.153150][T10738] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 583.182226][T10844] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 583.233631][ T1235] usb 2-1: Using ep0 maxpacket: 16 [ 583.367847][ T1235] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 583.367878][ T1235] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 583.367896][ T1235] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 583.367910][ T1235] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 583.367925][ T1235] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 583.375419][ T1235] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 583.375437][ T1235] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 583.375450][ T1235] usb 2-1: Manufacturer: syz [ 583.380955][ T1235] usb 2-1: config 0 descriptor?? [ 583.565352][ T9] net_ratelimit: 21 callbacks suppressed [ 583.565377][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 583.636101][T10738] team0: Port device team_slave_0 added [ 583.649100][T10738] team0: Port device team_slave_1 added [ 583.751419][T10738] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 583.751431][T10738] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 583.751447][T10738] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 583.760812][T10851] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 583.766451][T10738] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 583.766462][T10738] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 583.766478][T10738] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 583.771825][ T29] audit: type=1400 audit(1785242456.880:650): avc: denied { write } for pid=10825 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 583.788857][ T1235] rc_core: IR keymap rc-hauppauge not found [ 583.788868][ T1235] Registered IR keymap rc-empty [ 583.789678][ T1235] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 583.826823][ T1235] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 583.853544][T10856] netlink: 248 bytes leftover after parsing attributes in process `syz.2.976'. [ 583.860178][ T1235] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 583.901443][ T1235] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input18 [ 583.928397][ T1235] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 583.944633][ T1235] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 583.967327][ T1235] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 583.982643][ T1235] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 583.990135][T10738] hsr_slave_0: entered promiscuous mode [ 583.990863][T10738] hsr_slave_1: entered promiscuous mode [ 584.065226][ T1235] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 584.069197][T10738] debugfs: 'hsr0' already exists in 'hsr' [ 584.069211][T10738] Cannot create hsr debugfs directory [ 584.073816][ T29] audit: type=1400 audit(1785242457.180:651): avc: denied { setopt } for pid=10859 comm="syz.5.977" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 584.083053][ T1235] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 584.104451][ T1235] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 584.131392][ T1235] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 584.142748][ T1235] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 584.143794][T10864] netlink: 28 bytes leftover after parsing attributes in process `syz.2.976'. [ 584.167173][ T1235] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 584.185352][ T1235] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 584.185366][ T1235] mceusb 2-1:0.0: 2 tx ports (0x1 cabled) and 2 rx sensors (0x0 active) [ 584.190914][ T29] audit: type=1400 audit(1785242457.300:652): avc: denied { write } for pid=10860 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 584.210566][ T1235] usb 2-1: USB disconnect, device number 12 [ 584.248079][T10866] FAULT_INJECTION: forcing a failure. [ 584.248079][T10866] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 584.248100][T10866] CPU: 0 UID: 0 PID: 10866 Comm: syz.6.978 Tainted: G L syzkaller #0 PREEMPT(full) [ 584.248117][T10866] Tainted: [L]=SOFTLOCKUP [ 584.248122][T10866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 584.248129][T10866] Call Trace: [ 584.248133][T10866] [ 584.248138][T10866] dump_stack_lvl+0x100/0x190 [ 584.248157][T10866] should_fail_ex.cold+0x5/0xa [ 584.248173][T10866] _copy_to_user+0x32/0xd0 [ 584.248192][T10866] simple_read_from_buffer+0xcb/0x170 [ 584.248206][T10866] proc_fail_nth_read+0x1af/0x230 [ 584.248225][T10866] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 584.248244][T10866] ? rw_verify_area+0xce/0x6d0 [ 584.248261][T10866] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 584.248279][T10866] vfs_read+0x1e4/0xb40 [ 584.248300][T10866] ? __pfx_vfs_read+0x10/0x10 [ 584.248317][T10866] ? __fget_files+0x215/0x3d0 [ 584.248334][T10866] ? __fget_files+0x21f/0x3d0 [ 584.248350][T10866] ksys_read+0x12a/0x250 [ 584.248368][T10866] ? __pfx_ksys_read+0x10/0x10 [ 584.248390][T10866] do_syscall_64+0x115/0x870 [ 584.248405][T10866] ? clear_bhb_loop+0x40/0x90 [ 584.248419][T10866] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 584.248432][T10866] RIP: 0033:0x7ff30bd5e6ce [ 584.248442][T10866] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 584.248453][T10866] RSP: 002b:00007ff30cce8fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 584.248465][T10866] RAX: ffffffffffffffda RBX: 00007ff30cce96c0 RCX: 00007ff30bd5e6ce [ 584.248473][T10866] RDX: 000000000000000f RSI: 00007ff30cce90a0 RDI: 0000000000000005 [ 584.248481][T10866] RBP: 00007ff30cce9090 R08: 0000000000000000 R09: 0000000000000000 [ 584.248488][T10866] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 584.248495][T10866] R13: 00007ff30c026038 R14: 00007ff30c025fa0 R15: 00007ffc98069148 [ 584.248511][T10866] [ 584.289997][ T6748] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 584.290207][ T6748] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 584.290259][ T6748] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 584.290505][ T6748] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 584.291371][ T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 584.294971][ T5735] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 584.295265][ T5735] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 584.515430][ T9900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 584.526518][ T30] INFO: task syz.6.714:8888 blocked for more than 144 seconds. [ 584.526535][ T30] Tainted: G L syzkaller #0 [ 584.526543][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 584.526549][ T30] task:syz.6.714 state:D stack:28664 pid:8888 tgid:8887 ppid:7771 task_flags:0x400040 flags:0x00080002 [ 584.526595][ T30] Call Trace: [ 584.526600][ T30] [ 584.526607][ T30] __schedule+0x125c/0x6730 [ 584.526629][ T30] ? put_dec_trunc8+0x28b/0x370 [ 584.526651][ T30] ? __pfx___schedule+0x10/0x10 [ 584.526663][ T30] ? find_held_lock+0x2b/0x80 [ 584.526684][ T30] ? schedule+0x225/0x2c0 [ 584.526698][ T30] schedule+0xdd/0x2c0 [ 584.526711][ T30] schedule_timeout+0x1b2/0x280 [ 584.526730][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 584.526754][ T30] ? mark_held_locks+0x40/0x70 [ 584.526772][ T30] __down_common+0x371/0x8b0 [ 584.526791][ T30] ? __pfx___down_common+0x10/0x10 [ 584.526808][ T30] ? _raw_spin_lock_irqsave+0x52/0x60 [ 584.526832][ T30] down+0x74/0xa0 [ 584.526846][ T30] console_lock+0x5b/0xa0 [ 584.526862][ T30] con_install+0x99/0x620 [ 584.526880][ T30] ? __pfx_con_install+0x10/0x10 [ 584.526897][ T30] ? __pfx_con_install+0x10/0x10 [ 584.526913][ T30] tty_init_dev.part.0+0x9e/0x470 [ 584.526939][ T30] tty_open+0xa63/0xfa0 [ 584.526959][ T30] ? __pfx_tty_open+0x10/0x10 [ 584.526974][ T30] ? chrdev_open+0x589/0x6a0 [ 584.526987][ T30] ? chrdev_open+0x589/0x6a0 [ 584.527003][ T30] ? __pfx_tty_open+0x10/0x10 [ 584.527019][ T30] chrdev_open+0x234/0x6a0 [ 584.527033][ T30] ? __pfx_chrdev_open+0x10/0x10 [ 584.527048][ T30] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 584.527068][ T30] do_dentry_open+0x6ab/0x14d0 [ 584.527081][ T30] ? __pfx_chrdev_open+0x10/0x10 [ 584.527098][ T30] vfs_open+0x82/0x3f0 [ 584.527125][ T30] path_openat+0x2873/0x4280 [ 584.527146][ T30] ? __pfx_path_openat+0x10/0x10 [ 584.527165][ T30] do_file_open+0x20e/0x430 [ 584.527180][ T30] ? __pfx_do_file_open+0x10/0x10 [ 584.527205][ T30] ? alloc_fd+0x471/0x7a0 [ 584.527221][ T30] ? do_getname+0x191/0x390 [ 584.527239][ T30] do_sys_openat2+0x10f/0x1e0 [ 584.527259][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 584.527281][ T30] __x64_sys_openat+0x12d/0x210 [ 584.527298][ T30] ? __pfx___x64_sys_openat+0x10/0x10 [ 584.527321][ T30] do_syscall_64+0x115/0x870 [ 584.527335][ T30] ? clear_bhb_loop+0x40/0x90 [ 584.527351][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 584.527365][ T30] RIP: 0033:0x7f6dcd55e6ce [ 584.527376][ T30] RSP: 002b:00007f6dce43fb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 584.527388][ T30] RAX: ffffffffffffffda RBX: 00007f6dce4406c0 RCX: 00007f6dcd55e6ce [ 584.527397][ T30] RDX: 0000000000000002 RSI: 00007f6dce43fc00 RDI: ffffffffffffff9c [ 584.527406][ T30] RBP: 00007f6dcd633eaf R08: 0000000000000000 R09: 0000000000000000 [ 584.527414][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 584.527422][ T30] R13: 00007f6dcd826038 R14: 00007f6dcd825fa0 R15: 00007fff3ad72e48 [ 584.527439][ T30] [ 584.527445][ T30] INFO: task syz.0.729:8941 blocked for more than 144 seconds. [ 584.527456][ T30] Tainted: G L syzkaller #0 [ 584.527463][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 584.527469][ T30] task:syz.0.729 state:D stack:28776 pid:8941 tgid:8938 ppid:5616 task_flags:0x400140 flags:0x00080002 [ 584.527512][ T30] Call Trace: [ 584.527517][ T30] [ 584.527524][ T30] __schedule+0x125c/0x6730 [ 584.527541][ T30] ? irqentry_exit+0x24d/0xa00 [ 584.527559][ T30] ? __pfx___schedule+0x10/0x10 [ 584.527571][ T30] ? find_held_lock+0x2b/0x80 [ 584.527591][ T30] ? schedule+0x225/0x2c0 [ 584.527606][ T30] schedule+0xdd/0x2c0 [ 584.527618][ T30] schedule_preempt_disabled+0x13/0x30 [ 584.527631][ T30] __mutex_lock+0xccc/0x1bd0 [ 584.527647][ T30] ? ptmx_open+0x11a/0x360 [ 584.527660][ T30] ? ptmx_open+0xdb/0x360 [ 584.527673][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 584.527688][ T30] ? __mutex_unlock_slowpath+0x35d/0x930 [ 584.527707][ T30] ? __pfx_devpts_acquire+0x10/0x10 [ 584.527730][ T30] ? __pfx_ptmx_open+0x10/0x10 [ 584.527742][ T30] ? ptmx_open+0x11a/0x360 [ 584.527753][ T30] ptmx_open+0x11a/0x360 [ 584.527766][ T30] ? __pfx_ptmx_open+0x10/0x10 [ 584.527778][ T30] chrdev_open+0x234/0x6a0 [ 584.527792][ T30] ? __pfx_chrdev_open+0x10/0x10 [ 584.527806][ T30] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 584.527825][ T30] do_dentry_open+0x6ab/0x14d0 [ 584.527837][ T30] ? __pfx_chrdev_open+0x10/0x10 [ 584.527854][ T30] vfs_open+0x82/0x3f0 [ 584.527871][ T30] path_openat+0x2873/0x4280 [ 584.527892][ T30] ? __pfx_path_openat+0x10/0x10 [ 584.527910][ T30] do_file_open+0x20e/0x430 [ 584.527930][ T30] ? __pfx_do_file_open+0x10/0x10 [ 584.527955][ T30] ? alloc_fd+0x471/0x7a0 [ 584.527970][ T30] ? do_getname+0x191/0x390 [ 584.527988][ T30] do_sys_openat2+0x10f/0x1e0 [ 584.528004][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 584.529723][ T30] __x64_sys_openat+0x12d/0x210 [ 584.529747][ T30] ? __pfx___x64_sys_openat+0x10/0x10 [ 584.529770][ T30] do_syscall_64+0x115/0x870 [ 584.529786][ T30] ? clear_bhb_loop+0x40/0x90 [ 584.529802][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 584.529816][ T30] RIP: 0033:0x7fc48d19de99 [ 584.529826][ T30] RSP: 002b:00007fc48e121028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 584.529840][ T30] RAX: ffffffffffffffda RBX: 00007fc48d426090 RCX: 00007fc48d19de99 [ 584.529849][ T30] RDX: 0000000000000000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 584.529857][ T30] RBP: 00007fc48d233eaf R08: 0000000000000000 R09: 0000000000000000 [ 584.529866][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 584.529874][ T30] R13: 00007fc48d426128 R14: 00007fc48d426090 R15: 00007ffd42d276b8 [ 584.529891][ T30] [ 584.529898][ T30] INFO: task syz.5.736:8965 blocked for more than 144 seconds. [ 584.529909][ T30] Tainted: G L syzkaller #0 [ 584.529923][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 584.529929][ T30] task:syz.5.736 state:D stack:24888 pid:8965 tgid:8964 ppid:7367 task_flags:0x400140 flags:0x00080002 [ 584.529967][ T30] Call Trace: [ 584.529971][ T30] [ 584.529978][ T30] __schedule+0x125c/0x6730 [ 584.529996][ T30] ? do_raw_spin_lock+0x128/0x260 [ 584.530020][ T30] ? __pfx___schedule+0x10/0x10 [ 584.530031][ T30] ? find_held_lock+0x2b/0x80 [ 584.530051][ T30] ? schedule+0x225/0x2c0 [ 584.530066][ T30] schedule+0xdd/0x2c0 [ 584.530078][ T30] schedule_preempt_disabled+0x13/0x30 [ 584.530091][ T30] __mutex_lock+0xccc/0x1bd0 [ 584.530106][ T30] ? tty_open+0x539/0xfa0 [ 584.530126][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 584.530144][ T30] ? kasan_save_track+0x14/0x30 [ 584.530161][ T30] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 584.530182][ T30] ? tty_open+0x139/0xfa0 [ 584.530201][ T30] ? tty_open+0x539/0xfa0 [ 584.530216][ T30] tty_open+0x539/0xfa0 [ 584.530235][ T30] ? __pfx_tty_open+0x10/0x10 [ 584.530250][ T30] ? chrdev_open+0x10b/0x6a0 [ 584.530263][ T30] ? chrdev_open+0x10b/0x6a0 [ 584.530278][ T30] ? __pfx_tty_open+0x10/0x10 [ 584.530294][ T30] chrdev_open+0x234/0x6a0 [ 584.530309][ T30] ? __pfx_chrdev_open+0x10/0x10 [ 584.530323][ T30] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 584.530344][ T30] do_dentry_open+0x6ab/0x14d0 [ 584.530356][ T30] ? __pfx_chrdev_open+0x10/0x10 [ 584.530373][ T30] vfs_open+0x82/0x3f0 [ 584.530390][ T30] path_openat+0x2873/0x4280 [ 584.530411][ T30] ? __pfx_path_openat+0x10/0x10 [ 584.530429][ T30] do_file_open+0x20e/0x430 [ 584.530444][ T30] ? __pfx_do_file_open+0x10/0x10 [ 584.530470][ T30] ? alloc_fd+0x471/0x7a0 [ 584.530485][ T30] ? do_getname+0x191/0x390 [ 584.530503][ T30] do_sys_openat2+0x10f/0x1e0 [ 584.530519][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 584.530542][ T30] __x64_sys_openat+0x12d/0x210 [ 584.530558][ T30] ? __pfx___x64_sys_openat+0x10/0x10 [ 584.530581][ T30] do_syscall_64+0x115/0x870 [ 584.530595][ T30] ? clear_bhb_loop+0x40/0x90 [ 584.530610][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 584.530623][ T30] RIP: 0033:0x7fde5659de99 [ 584.530633][ T30] RSP: 002b:00007fde574bb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 584.530645][ T30] RAX: ffffffffffffffda RBX: 00007fde56825fa0 RCX: 00007fde5659de99 [ 584.530654][ T30] RDX: 0000000000088002 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 584.530662][ T30] RBP: 00007fde56633eaf R08: 0000000000000000 R09: 0000000000000000 [ 584.530670][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 584.530678][ T30] R13: 00007fde56826038 R14: 00007fde56825fa0 R15: 00007fff8dbc3b78 [ 584.530695][ T30] [ 584.530701][ T30] INFO: task syz.5.736:8966 blocked for more than 144 seconds. [ 584.530711][ T30] Tainted: G L syzkaller #0 [ 584.530718][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 584.530724][ T30] task:syz.5.736 state:D stack:28440 pid:8966 tgid:8964 ppid:7367 task_flags:0x400040 flags:0x00080002 [ 584.530764][ T30] Call Trace: [ 584.530768][ T30] [ 584.530775][ T30] __schedule+0x125c/0x6730 [ 584.530792][ T30] ? do_raw_spin_lock+0x128/0x260 [ 584.530814][ T30] ? __pfx___schedule+0x10/0x10 [ 584.530826][ T30] ? find_held_lock+0x2b/0x80 [ 584.530846][ T30] ? schedule+0x225/0x2c0 [ 584.530860][ T30] schedule+0xdd/0x2c0 [ 584.530873][ T30] schedule_preempt_disabled+0x13/0x30 [ 584.530886][ T30] __mutex_lock+0xccc/0x1bd0 [ 584.530901][ T30] ? tty_open+0x539/0xfa0 [ 584.530924][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 584.530941][ T30] ? kasan_save_track+0x14/0x30 [ 584.530958][ T30] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 584.530978][ T30] ? tty_open+0x139/0xfa0 [ 584.530997][ T30] ? tty_open+0x539/0xfa0 [ 584.531011][ T30] tty_open+0x539/0xfa0 [ 584.531030][ T30] ? __pfx_tty_open+0x10/0x10 [ 584.531046][ T30] ? chrdev_open+0x10b/0x6a0 [ 584.531058][ T30] ? chrdev_open+0x10b/0x6a0 [ 584.531074][ T30] ? __pfx_tty_open+0x10/0x10 [ 584.531090][ T30] chrdev_open+0x234/0x6a0 [ 584.531104][ T30] ? __pfx_chrdev_open+0x10/0x10 [ 584.531118][ T30] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 584.531138][ T30] do_dentry_open+0x6ab/0x14d0 [ 584.531150][ T30] ? __pfx_chrdev_open+0x10/0x10 [ 584.531166][ T30] vfs_open+0x82/0x3f0 [ 584.531184][ T30] path_openat+0x2873/0x4280 [ 584.531204][ T30] ? __pfx_path_openat+0x10/0x10 [ 584.531222][ T30] do_file_open+0x20e/0x430 [ 584.531237][ T30] ? __pfx_do_file_open+0x10/0x10 [ 584.531270][ T30] ? alloc_fd+0x471/0x7a0 [ 584.531286][ T30] ? do_getname+0x191/0x390 [ 584.541562][ T30] do_sys_openat2+0x10f/0x1e0 [ 584.541584][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 584.541601][ T30] ? do_sock_setsockopt+0x101/0x1d0 [ 584.541620][ T30] ? kfree+0x1e5/0x6c0 [ 584.541639][ T30] ? selinux_socket_setsockopt+0x6a/0x80 [ 584.541661][ T30] __x64_sys_openat+0x12d/0x210 [ 584.541678][ T30] ? __pfx___x64_sys_openat+0x10/0x10 [ 584.541701][ T30] do_syscall_64+0x115/0x870 [ 584.541716][ T30] ? clear_bhb_loop+0x40/0x90 [ 584.541732][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 584.541746][ T30] RIP: 0033:0x7fde5659de99 [ 584.541757][ T30] RSP: 002b:00007fde5749a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 584.541770][ T30] RAX: ffffffffffffffda RBX: 00007fde56826090 RCX: 00007fde5659de99 [ 584.541779][ T30] RDX: 0000000000088002 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 584.541788][ T30] RBP: 00007fde56633eaf R08: 0000000000000000 R09: 0000000000000000 [ 584.541796][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 584.541805][ T30] R13: 00007fde56826128 R14: 00007fde56826090 R15: 00007fff8dbc3b78 [ 584.541822][ T30] [ 584.541828][ T30] INFO: task syz.5.736:8967 blocked for more than 144 seconds. [ 584.541838][ T30] Tainted: G L syzkaller #0 [ 584.541846][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 584.541851][ T30] task:syz.5.736 state:D stack:28776 pid:8967 tgid:8964 ppid:7367 task_flags:0x400040 flags:0x00080002 [ 584.541893][ T30] Call Trace: [ 584.541897][ T30] [ 584.541905][ T30] __schedule+0x125c/0x6730 [ 584.541928][ T30] ? do_raw_spin_lock+0x128/0x260 [ 584.541951][ T30] ? __pfx___schedule+0x10/0x10 [ 584.541963][ T30] ? find_held_lock+0x2b/0x80 [ 584.541982][ T30] ? schedule+0x225/0x2c0 [ 584.541997][ T30] schedule+0xdd/0x2c0 [ 584.542010][ T30] schedule_preempt_disabled+0x13/0x30 [ 584.542023][ T30] __mutex_lock+0xccc/0x1bd0 [ 584.542038][ T30] ? tty_open+0x539/0xfa0 [ 584.542058][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 584.542076][ T30] ? kasan_save_track+0x14/0x30 [ 584.542093][ T30] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 584.542114][ T30] ? tty_open+0x139/0xfa0 [ 584.542133][ T30] ? tty_open+0x539/0xfa0 [ 584.542148][ T30] tty_open+0x539/0xfa0 [ 584.542167][ T30] ? __pfx_tty_open+0x10/0x10 [ 584.542182][ T30] ? chrdev_open+0x10b/0x6a0 [ 584.542195][ T30] ? chrdev_open+0x10b/0x6a0 [ 584.542210][ T30] ? __pfx_tty_open+0x10/0x10 [ 584.542226][ T30] chrdev_open+0x234/0x6a0 [ 584.542241][ T30] ? __pfx_chrdev_open+0x10/0x10 [ 584.542255][ T30] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 584.542275][ T30] do_dentry_open+0x6ab/0x14d0 [ 584.542287][ T30] ? __pfx_chrdev_open+0x10/0x10 [ 584.542304][ T30] vfs_open+0x82/0x3f0 [ 584.542321][ T30] path_openat+0x2873/0x4280 [ 584.542342][ T30] ? __pfx_path_openat+0x10/0x10 [ 584.542360][ T30] do_file_open+0x20e/0x430 [ 584.542375][ T30] ? __pfx_do_file_open+0x10/0x10 [ 584.542400][ T30] ? alloc_fd+0x471/0x7a0 [ 584.542416][ T30] ? do_getname+0x191/0x390 [ 584.542434][ T30] do_sys_openat2+0x10f/0x1e0 [ 584.542450][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 584.542472][ T30] __x64_sys_openat+0x12d/0x210 [ 584.542489][ T30] ? __pfx___x64_sys_openat+0x10/0x10 [ 584.542683][ T30] do_syscall_64+0x115/0x870 [ 584.542698][ T30] ? clear_bhb_loop+0x40/0x90 [ 584.542714][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 584.542727][ T30] RIP: 0033:0x7fde5659de99 [ 584.542738][ T30] RSP: 002b:00007fde57479028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 584.542751][ T30] RAX: ffffffffffffffda RBX: 00007fde56826180 RCX: 00007fde5659de99 [ 584.542760][ T30] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 584.542769][ T30] RBP: 00007fde56633eaf R08: 0000000000000000 R09: 0000000000000000 [ 584.542777][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 584.542785][ T30] R13: 00007fde56826218 R14: 00007fde56826180 R15: 00007fff8dbc3b78 [ 584.542803][ T30] [ 584.542881][ T30] [ 584.542881][ T30] Showing all locks held in the system: [ 584.542892][ T30] 1 lock held by khungtaskd/30: [ 584.542900][ T30] #0: ffffffff8ebe8180 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 584.542946][ T30] 3 locks held by kworker/u8:4/59: [ 584.542954][ T30] 2 locks held by kworker/u8:5/77: [ 584.542960][ T30] #0: ffff88801bc44140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 [ 584.542993][ T30] #1: ffffc9000245fd08 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 [ 584.543031][ T30] 3 locks held by kworker/0:3/1235: [ 584.543038][ T30] #0: ffff88823be36f40 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 [ 584.543070][ T30] #1: ffffc90005aafd08 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 [ 584.543102][ T30] #2: ffff88802b4631d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c0/0x4a60 [ 584.543150][ T30] 2 locks held by getty/5372: [ 584.543158][ T30] #0: ffff8880381cf0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 584.553954][ T30] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0 [ 584.554003][ T30] 2 locks held by syz.2.373/7264: [ 584.554014][ T30] 2 locks held by syz.6.714/8888: [ 584.554022][ T30] #0: ffffffff8f986b20 (tty_mutex){+.+.}-{4:4}, at: tty_open+0x539/0xfa0 [ 584.554055][ T30] #1: ffff88807ada91b0 (&tty->legacy_mutex){+.+.}-{4:4}, at: tty_init_dev.part.0+0x39/0x470 [ 584.554089][ T30] 1 lock held by syz.0.729/8941: [ 584.554097][ T30] #0: ffffffff8f986b20 (tty_mutex){+.+.}-{4:4}, at: ptmx_open+0x11a/0x360 [ 584.554126][ T30] 1 lock held by syz.5.736/8965: [ 584.554133][ T30] #0: ffffffff8f986b20 (tty_mutex){+.+.}-{4:4}, at: tty_open+0x539/0xfa0 [ 584.554174][ T30] 1 lock held by syz.5.736/8966: [ 584.554182][ T30] #0: ffffffff8f986b20 (tty_mutex){+.+.}-{4:4}, at: tty_open+0x539/0xfa0 [ 584.554214][ T30] 1 lock held by syz.5.736/8967: [ 584.554222][ T30] #0: ffffffff8f986b20 (tty_mutex){+.+.}-{4:4}, at: tty_open+0x539/0xfa0 [ 584.554256][ T30] 1 lock held by syz.4.761/9096: [ 584.554263][ T30] #0: ffffffff8f986b20 (tty_mutex){+.+.}-{4:4}, at: ptmx_open+0x11a/0x360 [ 584.554293][ T30] 1 lock held by syz.3.764/9142: [ 584.554301][ T30] #0: ffffffff8f986b20 (tty_mutex){+.+.}-{4:4}, at: tty_open+0x539/0xfa0 [ 584.554334][ T30] 1 lock held by syz.8.766/9187: [ 584.554342][ T30] #0: ffffffff8f986b20 (tty_mutex){+.+.}-{4:4}, at: tty_open+0x539/0xfa0 [ 584.554374][ T30] 1 lock held by syz.7.771/9214: [ 584.554381][ T30] #0: ffffffff8f986b20 (tty_mutex){+.+.}-{4:4}, at: tty_open+0x539/0xfa0 [ 584.554415][ T30] 1 lock held by syz.9.792/9301: [ 584.554422][ T30] #0: ffffffff8f986b20 (tty_mutex){+.+.}-{4:4}, at: tty_open+0x539/0xfa0 [ 584.554459][ T30] 1 lock held by syz.2.830/9686: [ 584.554466][ T30] #0: ffffffff8f986b20 (tty_mutex){+.+.}-{4:4}, at: ptmx_open+0x11a/0x360 [ 584.554494][ T30] 1 lock held by syz.0.833/9704: [ 584.554502][ T30] #0: ffffffff8f986b20 (tty_mutex){+.+.}-{4:4}, at: tty_open+0x539/0xfa0 [ 584.554535][ T30] 1 lock held by syz.1.848/9822: [ 584.554542][ T30] #0: ffffffff8f986b20 (tty_mutex){+.+.}-{4:4}, at: ptmx_open+0x11a/0x360 [ 584.554571][ T30] 1 lock held by syz.5.855/9864: [ 584.554578][ T30] #0: ffffffff8f986b20 (tty_mutex){+.+.}-{4:4}, at: tty_open+0x539/0xfa0 [ 584.554611][ T30] 1 lock held by syz.6.860/9899: [ 584.554619][ T30] #0: ffffffff8f986b20 (tty_mutex){+.+.}-{4:4}, at: tty_open+0x539/0xfa0 [ 584.554653][ T30] 1 lock held by syz.4.863/9959: [ 584.554660][ T30] #0: ffffffff8f986b20 (tty_mutex){+.+.}-{4:4}, at: tty_open+0x539/0xfa0 [ 584.554693][ T30] 1 lock held by syz.3.864/9961: [ 584.554700][ T30] #0: ffffffff8f986b20 (tty_mutex){+.+.}-{4:4}, at: tty_open+0x539/0xfa0 [ 584.554737][ T30] 1 lock held by syz.9.915/10391: [ 584.554745][ T30] #0: ffffffff8f986b20 (tty_mutex){+.+.}-{4:4}, at: tty_open+0x539/0xfa0 [ 584.554778][ T30] 1 lock held by syz.8.917/10393: [ 584.554785][ T30] #0: ffffffff8f986b20 (tty_mutex){+.+.}-{4:4}, at: tty_open+0x539/0xfa0 [ 584.554818][ T30] 1 lock held by syz.7.933/10497: [ 584.554825][ T30] #0: ffffffff8f986b20 (tty_mutex){+.+.}-{4:4}, at: tty_open+0x539/0xfa0 [ 584.554861][ T30] 3 locks held by kworker/u9:2/10644: [ 584.554868][ T30] #0: ffff88804a90b140 ((wq_completion)hci9){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 [ 584.554901][ T30] #1: ffffc90006957d08 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 [ 584.554937][ T30] #2: ffff8880593dcea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x18a/0x470 [ 584.554975][ T30] 2 locks held by syz-executor/10738: [ 584.554983][ T30] 1 lock held by dhcpcd-run-hook/10825: [ 584.559955][ T30] [ 584.559962][ T30] ============================================= [ 584.559962][ T30] [ 584.559977][ T30] NMI backtrace for cpu 0 [ 584.559987][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 584.560004][ T30] Tainted: [L]=SOFTLOCKUP [ 584.560008][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 584.560016][ T30] Call Trace: [ 584.560020][ T30] [ 584.560025][ T30] dump_stack_lvl+0x100/0x190 [ 584.560042][ T30] nmi_cpu_backtrace.cold+0x12d/0x151 [ 584.560059][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 584.560077][ T30] nmi_trigger_cpumask_backtrace+0x21c/0x2a0 [ 584.560098][ T30] sys_info+0x141/0x190 [ 584.560114][ T30] watchdog+0xcb1/0x1030 [ 584.560131][ T30] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 584.560144][ T30] ? __pfx_watchdog+0x10/0x10 [ 584.560159][ T30] ? __kthread_parkme+0x18c/0x230 [ 584.560178][ T30] ? kthread+0x13a/0x450 [ 584.560189][ T30] ? __pfx_watchdog+0x10/0x10 [ 584.560202][ T30] kthread+0x370/0x450 [ 584.560213][ T30] ? __pfx_kthread+0x10/0x10 [ 584.560226][ T30] ret_from_fork+0x72b/0xd50 [ 584.560244][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 584.560261][ T30] ? __switch_to+0x800/0x10f0 [ 584.560274][ T30] ? __pfx_kthread+0x10/0x10 [ 584.560286][ T30] ret_from_fork_asm+0x1a/0x30 [ 584.560311][ T30] [ 584.560323][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 584.560332][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 584.560348][ T30] Tainted: [L]=SOFTLOCKUP [ 584.560352][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 584.560362][ T30] Call Trace: [ 584.560366][ T30] [ 584.560371][ T30] dump_stack_lvl+0x100/0x190 [ 584.560386][ T30] vpanic+0x552/0x970 [ 584.560398][ T30] ? __pfx_vpanic+0x10/0x10 [ 584.560410][ T30] ? nmi_trigger_cpumask_backtrace+0x1c7/0x2a0 [ 584.560429][ T30] ? rcu_is_watching+0x12/0xc0 [ 584.560450][ T30] panic+0xd1/0xe0 [ 584.560461][ T30] ? __pfx_panic+0x10/0x10 [ 584.560474][ T30] ? nmi_cpu_backtrace+0x79/0x200 [ 584.560493][ T30] ? nmi_trigger_cpumask_backtrace+0x203/0x2a0 [ 584.560512][ T30] ? watchdog.cold+0x1ec/0x234 [ 584.560525][ T30] ? watchdog+0xcc1/0x1030 [ 584.560540][ T30] watchdog.cold+0x1fd/0x234 [ 584.560556][ T30] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 584.560569][ T30] ? __pfx_watchdog+0x10/0x10 [ 584.560584][ T30] ? __kthread_parkme+0x18c/0x230 [ 584.560603][ T30] ? kthread+0x13a/0x450 [ 584.560614][ T30] ? __pfx_watchdog+0x10/0x10 [ 584.560628][ T30] kthread+0x370/0x450 [ 584.560639][ T30] ? __pfx_kthread+0x10/0x10 [ 584.560652][ T30] ret_from_fork+0x72b/0xd50 [ 584.560669][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 584.560688][ T30] ? __switch_to+0x800/0x10f0 [ 584.560700][ T30] ? __pfx_kthread+0x10/0x10 [ 584.560713][ T30] ret_from_fork_asm+0x1a/0x30 [ 584.560738][ T30] [ 584.560795][ T30] Kernel Offset: disabled