last executing test programs: 1m29.964132353s ago: executing program 0 (id=78): r0 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) recvmsg$kcm(r1, &(0x7f0000001d00)={0x0, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000001bc0)=""/80, 0x50}], 0x1}, 0x0) socket$igmp(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000000340)="b8", 0x1}], 0x1}, 0x4000001) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000300)=0x2, 0x4) mmap$xdp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x100000000) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[], 0x101d0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) recvmsg(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x12) close(0x3) 1m27.483967732s ago: executing program 0 (id=83): creat(0x0, 0xecf86c37d53049cc) syz_open_dev$vbi(0x0, 0x1, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f00000000c0)={'pcm3724\x00', [0x4, 0x80000000, 0x3, 0x14, 0x1, 0x2, 0xb, 0x40003, 0x80008, 0x2, 0x2, 0x1, 0x7, 0x1, 0x3, 0xfd, 0x2, 0xd, 0xfffffff9, 0x80000000, 0x3, 0x174000, 0x103, 0x20001e58, 0xfffc0001, 0xf3a2, 0x799, 0x80002008, 0xa6b7, 0x24a05ffd, 0x1fe]}) 1m25.921081518s ago: executing program 0 (id=85): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, 0x0, 0x44080) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000080)=0xf3f, 0x4) sendto$packet(r3, &(0x7f00000000c0)="3f0302e90302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) write(r0, 0x0, 0x0) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) 1m23.054420817s ago: executing program 0 (id=90): syz_usb_connect(0x5, 0x36, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) fcntl$getownex(r0, 0x10, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x82200, 0x0) socket(0x10, 0x803, 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$alg(0xffffffffffffffff, 0x0, 0x40000800) ioctl$KVM_CAP_EXIT_HYPERCALL(r2, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x42, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f00000001c0)={"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"}) 1m22.490973089s ago: executing program 4 (id=93): openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/clients\x00', 0x0, 0x0) lseek(r0, 0x126, 0x0) r1 = getpid() r2 = syz_open_dev$mtd(&(0x7f0000000200), 0x0, 0x8000) readv(r2, &(0x7f0000001980)=[{&(0x7f0000001940)=""/13, 0xd}, {0x0, 0xffb6}], 0x2) r3 = syz_pidfd_open(r1, 0x0) setns(r3, 0x24020000) r4 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000280)={0x0, 0x0, 0x815, 0x13, 0xfffffffd, 0x4}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) open_by_handle_at(r6, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x454680) 1m20.932560073s ago: executing program 0 (id=97): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) gettid() mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 1m20.825182682s ago: executing program 4 (id=98): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f00000015c0)=""/4059, 0xfdb, 0x17, 0x0, 0x0) writev(r0, &(0x7f0000001540)=[{&(0x7f0000000140)="58ddb007a47a8b1f458ab677d557ca50def8e5bc61dbc50bca64f7e76268cd64007095adfef77465b69ec03139854d6f03d5f9bd019fe046035ef7049f48fcc7321c34faca94ff08f59edaf2ab55eedcc278df823564618627217a527b971bdfa0afd948a6cdb9e05ccaef35c22047246a7b97a8e1b645e51c47b296c759c8dfd56beb8fa15c800ad060ab378a269557bc053d9be903", 0x96}, {&(0x7f0000000300)="2ea63d218bc1023b2e6eceeb92d548803a43d4dddc2433c76650030c188f490311ff86da69fab1539139f6dda31739c2bb4412dd471137e2a53496c5f7707e01ccfb826f2eb96895230862e11d56c19af139de912ac5e68a99080e428443fcfba8b0460290c6275affe9953a97260b0304fd7ef159c9cd30cae1bcc75d568d353575ec3b5293fb80de85c7562804230489274831b2c17dccccc523ada66a46", 0x9f}, {&(0x7f00000025c0)="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", 0xffca}, {&(0x7f0000000240)="de21cff472aa580c2ee9f8581f07935d8e9b5f279f2813c7763c3e6f113ea2b36230ba98873cad7777a83a746a6c6db65abb5e03aaf95c2be0dbe015fe56b07a8b2ce6ca3b79", 0xc}, {&(0x7f0000000540)="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", 0xde4}], 0x5) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) 1m19.584264022s ago: executing program 0 (id=99): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x30, 0x8b}, 0x0) getpid() r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r1, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) ppoll(&(0x7f0000000100)=[{r1, 0x3328}], 0x1, 0x0, 0x0, 0x0) unshare(0x22020400) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) recvmsg(r1, &(0x7f0000001480)={0x0, 0x0, 0x0}, 0x100) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 1m14.828194503s ago: executing program 4 (id=106): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0xffffffff, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0xffffffff, 0x6361, 0x7, 0xfffffffd, 0x40000004}}}}]}, 0x4c}}, 0x20000804) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r6, {}, {0xd, 0xb}, {0xffe0, 0xd}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x9, 0xb, 0x4}}}}]}, 0x40}}, 0x4010004) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="640000004ec6"}) 1m3.614297875s ago: executing program 32 (id=99): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x30, 0x8b}, 0x0) getpid() r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r1, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) ppoll(&(0x7f0000000100)=[{r1, 0x3328}], 0x1, 0x0, 0x0, 0x0) unshare(0x22020400) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) recvmsg(r1, &(0x7f0000001480)={0x0, 0x0, 0x0}, 0x100) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 1m2.904606651s ago: executing program 4 (id=122): bind$unix(0xffffffffffffffff, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socket$unix(0x1, 0x5, 0x0) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x44000) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r0, 0x90004) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) close_range(r1, 0xffffffffffffffff, 0x0) 58.634072905s ago: executing program 4 (id=127): sched_setscheduler(0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102400, 0x19000) socket(0x2, 0x80805, 0x0) sysfs$1(0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0xf000, &(0x7f0000000140)={&(0x7f0000000000)={0x14, 0x23, 0x301, 0x270bd24, 0x25dfdbff, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4008}, 0x4000000) syz_open_dev$MSR(0x0, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000780)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00cd04", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x5, 0x1}}}}}}, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 52.953386166s ago: executing program 4 (id=135): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001240)={0x8, {"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", 0x1000}}, 0x1006) socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$cgroup_int(r1, &(0x7f0000000040)=0x1f00, 0x12) 36.842306107s ago: executing program 33 (id=135): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001240)={0x8, {"aa67d023fef64ec300a20f6f4fd2167e83da151d88dc10393612042db6d0288b632607b09de5abf2328c87a3b7772dbef8a36556c3ac45f4f8c3851d15afab519783959c75921b3a71169830c47fba28188ef25157ee028fca6551d8f63f98bffd05e0ede274245c040937de707edc9db987e9aee3e4a90a7a8580124184e7b735c2f5a6131bd0ee12bc510d14c8ba43d046c1c194d43cf37e6a972201d192820b8819c09f54825eabc351d5b09cecbd4dbd65e6c2726639de24ed12959d2fab8a2b37e1b3ddfb276bdbde942270e5a1f618f758ab1af01cc9eebdeb547fc4f22488e6726b85be691d7ecdb08c465654e8bf4ba2a59845365a2df07caed2a4f8d52d00c510a6a51328f9830c6232fee2df6ef6b1b3b9aaff92d8564c34a33457a22352b3e91e18b958c580e8b36bb6f7cb74b6c5ac055bee5600b563658f3aa5a3bd82225554a0350cfc93863192484b5313291714ce40183682469b17e5a3fee3d8cffaf3741e03bb38879aad8e85c097d6a7e24a16c023846918995254f2e0885b9dfdca2f84d1d75a5ed48c6e8bc907e5143389b123575bbc9cd8d437ee9a8f17c8345d774e494accc3e0c3568de4bf306ec70e7ba9e35167408ed4df0f13bc3f56db0cba506eea65b9f77c92c0a8d3e4eff8711b24e4743879821e4c841537236d30e83fa91073ea4b02a58922fe46a29fb4cb6c2f41d3bfcdf436ca23b147898971bf230ba8e27b6410a3020e773f26631482920041afae824c3285bc9f2d973ceb5c5838fd179c3f8cde6cd91891936d6dfd508c66bedc918d236696582ac33d1b6702bf5f94630a23d814ca01df18a9227aa9e440a0bf8f15763e77f3b32437280e639241ba46f1966d2d6426d9f8f658d603ae5416c0663d6bd61ae8e69e8744c7f609f3b00b0dcf107f12ea83edb260aa10237d955c78738438bf224d9c8289c6a5ec956ef4ec60578e60072882682023600718af9ba4ba1f5c158bea9f1e503b32d7adec8845b00cb07cc99aa5ee39bfb6c5cbf46a78fb7c6349f56ac98a0314410936a1c5468e4ad98f555bf8e501052432277a0b0c4cd4380c2d8660633f084ecbdb0525957e902287706eac6f4be4265ceacccf8df9aed3ae99a2760816f17db96b1c8d43a4bd1727b2b825efe7054c7402ebd487930ca25ffea17806d9f2bcbaaae48b8c1dd37abb7e177565e2b4ad391a8d85e0b9f57c0ca02fe0ddb9c81fbc0c3924ccf14775215761a9d5eae1b86324191093253aa184074a2bacdf76efbd061a97a81aa921cde65c9d63334a23e560f3656e725f4a24b6a7060f07b54a45307a28e2a906cc83133676b4975807bd2318b58f0346fa8d43e0f87c5b954164c25136365248a41cad6292816967fc565c1705219704ff91042538a2b96844879c25523f056a072d51db7ffd14b5389965f23d9e1ac539731f6c242d4379536e7cf43eebcfa3611ccb5ef42771bab1311c4345b4695da03543b0c4877c063494475086c70a8c6e7b817e926f793115622ea4961062f0412d5ed62556d727af5ce8ec36d72d1d2ea0a5a1412cd24622fd8e69b280c3e7f72b0208a1e72505bf551c95f19583bb04f34bc792f4604cc8606bbbbb70fe7604154eee9e9532431ab67ac1589d719214ba169bb799a93003557ce2ab24cb81407af8a99ab9cb3609837ac4fe8846862a4c04ce50298ab09a8be6f00a3e59e87ec037376d9fc2fbea48786a0a4bfc31ab21663bd650535f43967a82b874a129628d034ce9d7495f71f0066824d4321717e915f2d7994cc98cc11df99ec6c33d2a2a7aee5e09c3b9a1cd0859df9ef5a925409ca1d44550a3806c1d1898f80b2cb8ec076a7c4563a4925f1da588f5c11ad96ad0e99ffe4732cbff89b2c882436dd664e64b099683bb3b4c03f4ea245b3c80968956bc275bfc59d6d7f3f982ab65295c27050480352011fe03b3fe3011e56f6899af77eccb4b62aa22eb23eb43566a9e96c2cfa9e6dd05347df9ff602e169eb7cd74de859b7eb71da14f48ecaa14f1125c8ea1918c66ebad3a086fc9f8463cbf926d0f7c6d796f2311ffa4b77ec393ca7ce4ac0af1a96da6c50abcfb86cf09d521e10d58817b5e0e6189fe30869eb6b26b92e7b6c7431c4ab0112bd21ec3f749eaa0b01c216d44d2e36bd697347c3bcd901c02de4f970fbd3b46dc48cc90c13d60f1a2f561ca77c5e6bde9e3e5f0376820951e2fda920743be534eeb41b048664e99ebe5ad60faef7723c620fac0abde8f088b58678bba6825dbf2ceec4b9b274065481d4bbb55a03f419205e994b09f02ad83ffa0ae6ad5cb16dec9250d82f4ba1c2d763be7522e414867678db21bb3195e37f3f200e0a9faa8b32d78b2d1eb1c293148dafc4034d8130961506f43fc8df3cab6ac4adb9f0ad7277509d8b597b49ebb74d7ae647916ed8933b1ef713fc7335535822dce8bb90394287383b7df910fd90c57ba0ad962817bbb728ae458c3bf763f9b9b31d9d0ba276fc29a59cc4d232c91e7ca99992d5c36f7545e3eeff2845a7b532bf0be96e2f41d1d5ec9409be1458c8fe922f5ad458435304a50f875ce9064f14b12ef2ff009e51590119da4f7e6728e1e2882c676c8f014a33d4bb2377035451e5000579bf7f93711a9c0d067a2d721f34dd761c3a2b50b167515169e6e0bd7ed895dfa1ee087af0ed54c41d6f3d4a2201b87ee630eeaf5def9895f3762901ace4770d4ca3e2882671cec9cb85c7f25beff695cc32bf69b4e17b73626c0b50415484328c337659ed105cc534a1a25b20621b393035ad3da3335dd9cb81ef194e9ad672d151e9a1920570bef3e202081e4d7f177dceed87edd214da160b8c0ea5dee88d261e1a9d11041b1cca14512be53b9d22918a6d184b4adb65befb4b8f8d277d3a19c252e3d911dd05d0100c7f5c34f01bd3a9973e1b129452548ec3736fc8fe8ff69410a053a1f72d9832711df4f5a74782d208f84cb427d308badadb5ab68d994f149e6b30cec27ec625492a289f1346c2e322c7673de39dcd245f16f31b1891e3e0b6e46cc54d606b894cfd64eb26f1be302c578e677f5e26006ce66aa64d9db3c4f4f9a3d4448224b1d0ff115bdbe939beb38e82d46acf52710c40be02625454e9117423676571d7f430b7059b68885bac821f94e71087ad749bad41ddcecc971cc80e05c27f0f9c92f59d8e618efaf947dac4d34d3706a27321321618ed19a2a09678a50c93e77d3a993bc2a91c79bdcc33218150dcfa59757f25c9af3c3aa508eb0aa394b615416638c675c4c8ec12ad0d61daed0e404b23682f4c44e080452630df69890ba55ff5543f140d5f16a7b25b495e992e33250c3c2ad11292a2e9f9de32ade9890a05c1d95784e459535cae99d44f1fbdfab46dea8bd92488716614b508a3fb47a1b225fd5da92265ecfa3743cb997c4caa5961d851ae93ee25f24c9175589841bedc8d295ec8f2c2a4fa42d64f3d788f7809380622e4116145a8a94224a92ee161397ff32b858b888e8e8049c2eb74b8cf68b8b1bf9fab7b0a76542772fce9bb2df6dabecdbefa4ca50d75cc25fdae687285c5a4a272057edb9edbdff136a216f28c6a658d120cbea95c521a4b6a20800643788aea9056eb98ad34161031ee26019bfbc0af87e4e86c7052369e3df16e71a7207f77614c379a3dfc5e9f775bac02325d3b867ccb5c6e4f32ae1ea18e6311b0dbf40a0e0c8a8534b24f6c5d79b5f857762821666e35243d5702197d794f37f55151567f022e6325bf8262e62c258e1ac0ed36b0c9406c2b0d42c01b385dac2075995d26a7a26c810ae7976d9099e4ecca8fdd5745db61080b44ee39807b4a79b7588415468c01c988ae070e0ff755ad42522eb1f7582428cb70a9629cccbe959886e6469e2d6c6f4574a68838e51458a5a616aac69d294a92bba5da7c47d12e63c12963fc880069f27f6ffa42209d2456c4b5fe5deea88a526a62c59161697398bb138f845113926dc64da2cfa257fa843f9085f8df47453f43baf75265c37637a9027d46a17f8948503c60bd010b149cce0de8f03720e218b121ecae524e75638f419f59e4ff1ee5ab531b4575d05c5a07c6b31a76485167e3d0bd2a640f6dc6abf1c092a8ea3d1851a5ae339e80ae2e27c71b47ee310023216d5ff47c70b182f0297b914995825bdcbc5916edad9184a4ad6a75ce4a1edc5436309bc3bee118f550eff9e8c56ad63de2c7c28a711c530eed686ea9e8a0536cfd26cbfaabb387ce3b534a78ce38edd41494ba3e7ed482e63008ac7b17a3a3010e12d4d33e86310754aa88fc9f75dc18044e1c2b145e57b28a1c269182434041acd889ba29c52a79b8d75f938751cc871381b702aad966c430af0802ef93dc30b1c26b9f0b00ac33df3bf103559b6ca24094b2706cae24f557fcc9ebaef5456e4deac92f86c0c93f400357cbd60cc209f7d3f3a0eeb8eae0915e5df3314129311583ab4bc958d734981d9eb3237c777825bee33c000b3e6623d6a90f193c63b69fa70cb535b11da5890352e22c2d6ec2a8b8fbf6aecded096cf4d80f98d8307a8e4abc38ae89858eb2b9e50af30c5e38b1bfe6841b35094a5bcf251e261c7cffbb6c06fa7fd26db98def86d1cfa832b643195c5a057c90ce8ef493a6a3cb8bbdff5cf2566ef46dd00cd7bb08fc228b3a6eaebcb9c009060e5e9a85f9f49ababa5194b966a4cbb6dbd7d0a8285b1af1474faccfdf577c27592bb02f83cc52c265e9a04e659833605d0acecc7462350882b8eaa78ff7b0b6c2ee95d92a4de857128cbcdc83aec06f5e695484da55a164a558800b5643dd957f3dade1f046287724df89355d1477640e7015bf6195af1776e3d525f3365d8877ca90fce5f852b0227f7824a6a247a430e37a782888518ca0174ca817c9d28f2b9e894a73d444ee80af470b4a7c024d2e98b6d9c71e8e838395d3c08c84f8815c31cd303d5c5ae02ef5dc23f5f1e1d0fb1afe680f4b3e7e229deefa9798adfa24d4c5ddc7e1f2c990163795cd0b886cca4a204e3928ffa84807164aafe7e3a91b3a8295f517d876c16b0a626baad8fe56fe48834b54cad8ad82141f3a82f7caa434467a80d8be77fe7e0ba77b92ef4a62ac6628fdccaa36e70aa3decd4a2b299065b739e418153616a59dcde60628b80b6d679278902a005b50a8e7f0e20682f97a8fe6071d95e3118de24a352b7e474e469d31795202af8ab6869be0267b4b94bd78289f0561dfc9394f742103e29167b3bb944281650500b721f89154d73cfc3dad66271dddbfda8ad07c3ed88311df2ee6452080964ed65492e7e9f366f2ee7cf6ba0b1847bf9907311f89d56c3d2969d08053b9d3d315edd90833f1205804d1b3fd713bbee50dc9aa942058b643833827b809f540b57259123e348ae881d9bf122fe701596a3682b34ee9297d725bd52f9d88f176112871519e8da0a4135a161366a967d1ba8409990e9f0cf0a14883cb184a391b64bb17ca55bcf833bdc967401cccb948582633fcfa4db1a80b366810b03606a35fa4b552578def1c3716a5e35187035ae451f01a1f8cbca8d25aca12b841121eed32ce4dc1a1b152c772fe7610fddc1478992b04ec241386d8566389fc9ac40df498b3d0cf6bd1caa5700d9cd5e23ad87781bd93b5a751c425a640b277cbc88273186a9636c00c6e024f7d10e69b58f7cb1e6f99e00c61576562f42c684faa3fbea37e2d3455e76de3f7ba56b688b669f6429e128fba7b95613b7f49ec85d2c86f0c5a71b26e02e7e1d20c82ab8c4ed3c154b9645cba46d", 0x1000}}, 0x1006) socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$cgroup_int(r1, &(0x7f0000000040)=0x1f00, 0x12) 13.064268594s ago: executing program 1 (id=188): userfaultfd(0x80001) r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_open_procfs(0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff30}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r2 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0xaa24, 0xc000, 0x3, 0x1fa}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r2, 0x6633, 0xcf74, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) syz_usb_connect(0x5, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902"], 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x38}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010040000000032c000000030a01030000e6ff00000000020000000900"], 0x7c}, 0x1, 0x0, 0x0, 0x200480c0}, 0x0) sendmsg$NFT_BATCH(r3, 0x0, 0x0) syz_genetlink_get_family_id$team(0x0, r1) 10.952601675s ago: executing program 2 (id=191): r0 = openat$dsp(0xffffffffffffff9c, 0x0, 0x42f82, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) mlock(&(0x7f000040a000/0x4000)=nil, 0x4000) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0x48, &(0x7f0000000300)={0x0, 0xf20c, 0x40000, 0x2, 0x2d6}, 0x0, 0x0, &(0x7f0000000000)) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) writev(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000007600), 0x0, 0x2000, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, 0x0) write$dsp(r0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = socket(0x15, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='configfs\x00', 0x200, 0x0) getsockopt(r1, 0x200000000114, 0x2711, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) 10.264970242s ago: executing program 2 (id=192): socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x800) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat(0xffffffffffffff9c, 0x0, 0x281c2, 0x0) fcntl$setlease(r1, 0x400, 0x1) truncate(&(0x7f0000000100)='./file1\x00', 0x7) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2040, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00006dbffc), 0x4) recvmmsg(r2, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x20010020, 0x0) 10.133434825s ago: executing program 3 (id=193): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) ioprio_set$uid(0x3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x0, 0x5, 0x7, 0x3, 0xfffffffd, {0x400000080001, 0xfd, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffc, 0x6000, 0x0, 0x0, 0x0, 0x5, 0x7}}, {0x0, 0x13}}}, 0xa0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) open$dir(&(0x7f0000000280)='./file0\x00', 0x800, 0x123) openat$mice(0xffffffffffffff9c, 0x0, 0x29c800) 9.528237735s ago: executing program 1 (id=194): r0 = getpid() bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) syz_pidfd_open(r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f00000000c0)='veth1_to_team\x00', 0x10) sendto$inet(r4, 0x0, 0x0, 0x804, &(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10) 8.361262508s ago: executing program 2 (id=195): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) write$P9_RMKNOD(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000001c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r3, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r5}) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f0000000580)={0x401, 0x1, &(0x7f0000000180)=[r5], &(0x7f00000000c0)=[0x3], &(0x7f0000000640)=[r7, r6, r6], &(0x7f0000000340), 0x0, 0xffffffffffffffff}) 8.239860551s ago: executing program 3 (id=196): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x800000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r4 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r4, 0xffff) fcntl$addseals(r4, 0x409, 0x7) r5 = ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000000)={r4, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f00000001c0)=0x1) 8.238482567s ago: executing program 1 (id=197): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000004c0)={'vcan0\x00'}) msgsnd(0x0, &(0x7f0000000b40)=ANY=[], 0xfffffece, 0x0) syz_open_dev$sndmidi(&(0x7f0000000000), 0x10001, 0x218800) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r1) llistxattr(&(0x7f00000001c0)='./cgroup\x00', &(0x7f0000000240)=""/1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close(r0) 6.743785467s ago: executing program 2 (id=198): socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$xdp(0x2c, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x400000000000004) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) pipe2(&(0x7f0000000000), 0x80000) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4000003, &(0x7f0000000080)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4e21, 0x9, @mcast1, 0x9}, r1, 0x8001}}, 0x48) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 6.728750903s ago: executing program 3 (id=199): socket(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x20000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x4, &(0x7f0000000100)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100}, 0x94) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r4, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffff", 0x9) connect$inet6(r4, &(0x7f0000000240)={0xa, 0x6e23, 0x2, @mcast1, 0x9}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000000c40)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x114, @local, 0x80000000}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000280)="0bcf005c82232511bda6bcaa6f111c4797af16573bca394e0d4512d90733130e669cf9dfb07b8d4f3556e20b20f621b2c9ab5190d4ae49c0d380b20ec43b882cc781a82eb0beab53566b0736fe412965d4fb33118e5bf7f579d03dda19a48d732ef99793132440a02d6865761e99d57d7cf7b0108a01ff47e86d659e911066d97fff5e8349e6aac75c", 0x89}, {&(0x7f0000000340)="48d8402ef85e5bc6566ea6aa0a8fefb4cb477ef3dcf03e0638ac9ba37fc010695e29bb950dc12e7b1930a27ff550b2317154009d973f86d182b5042124eee8f5daba757d6dc5f3786e0f0654edab46db2f1feae2bcc1a605dd0aad800e15544b8d4a0fa4a0c02c092a29e92ba5da4b1d49acfe1f2c25eca306c6a26cd08d213cefda2dcc4c734b90a01c0ecd1d2116adea2c859a41c7fe914669b3b359d3373497ebde45995b7530e6106c0ca5cdd76c73bcf2f352161e1be0098bd8803e2ac5429638d9b698d8dcaf7f777a33b89b0d372032f40c05e11a20d7cc", 0xdb}, {&(0x7f0000000440)="9be59ccf51d57e9169", 0x9}], 0x3, &(0x7f00000004c0)=[@dstopts={{0xc0, 0x29, 0x37, {0x8, 0x14, '\x00', [@ra={0x5, 0x2, 0x7}, @pad1, @calipso={0x7, 0x40, {0x2, 0xe, 0x74, 0x7fff, [0x0, 0x0, 0x9, 0x7, 0x7fff, 0x3, 0x0]}}, @enc_lim={0x4, 0x1, 0xf}, @enc_lim={0x4, 0x1, 0x3}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, @calipso={0x7, 0x40, {0x0, 0xe, 0xff, 0xfb1e, [0x5, 0x6, 0x94a, 0x1, 0x6b, 0x5, 0x8]}}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x8}}], 0xd8}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 5.729708094s ago: executing program 2 (id=200): setsockopt$MRT6_ASSERT(0xffffffffffffffff, 0x29, 0xcf, &(0x7f0000000140)=0x1, 0x4) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) sendmsg$NFT_BATCH(r2, 0x0, 0x0) close(0x3) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000002000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa0000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r3, &(0x7f0000004d00), 0x3fffffffffffe8f, 0x4000f50) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x55}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYRES16=0x0, @ANYRES8], 0x3c}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040540) 5.4460326s ago: executing program 3 (id=201): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(0x0, r1) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x1c}}, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0xc}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) 2.844848118s ago: executing program 1 (id=202): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) symlink(0x0, &(0x7f00000001c0)='./file0\x00') accept4(r2, 0x0, 0x0, 0x80000) 2.842563786s ago: executing program 3 (id=203): prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}]}) chdir(0x0) r0 = syz_create_resource$binfmt(0x0) openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x8841) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in6=@loopback, 0x0, 0xb0, 0x4e21, 0xfffc, 0xa, 0x0, 0x0, 0x33}, {0xc, 0x800000000000, 0x4, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x6}, {0x8, 0x259b, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1, 0x0, 0x2}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x3, 0x1, 0x47, 0x200000, 0x200}}, 0xe8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0x541b, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x4, 0x8040000000000000}) close_range(r3, 0xffffffffffffffff, 0x0) 2.810507885s ago: executing program 2 (id=204): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, 0x0) epoll_wait(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x80000000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = userfaultfd(0x80801) r3 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r3, 0x13) tkill(r3, 0x12) wait4(r3, 0x0, 0x8, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) socket$inet6_sctp(0xa, 0x5, 0x84) r4 = getpid() process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) 503.792113ms ago: executing program 1 (id=205): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a0000000212a277", 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x19, 0x4, 0x4, 0x12}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r3, 0x5}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000740)={@map=r4, 0x26, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) geteuid() r5 = epoll_create1(0x80000) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x10) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f00000000c0)={0xe000001a}) read$eventfd(r6, &(0x7f0000000000), 0x8) close_range(r0, 0xffffffffffffffff, 0x0) 1.93483ms ago: executing program 1 (id=206): syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000040)}) mmap$KVM_VCPU(&(0x7f00002db000/0x4000)=nil, 0x930, 0x1000002, 0x20031, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(ecb-aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="10797fcd6cd957d2b903c6bf46b4abf3629f", 0x12) accept4(r0, 0x0, 0x0, 0x80000) mremap(&(0x7f00005a7000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f00004fe000/0x4000)=nil) mremap(&(0x7f0000498000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) mlock2(&(0x7f0000d39000/0x1000)=nil, 0x1000, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='maps\x00') read$FUSE(r1, &(0x7f0000005200)={0x2020}, 0x2020) 0s ago: executing program 3 (id=207): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000"], 0x1c}}, 0x0) syz_open_dev$vim2m(0x0, 0xd2a, 0x2) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019c80)=""/102400, 0x19000) r4 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000280)={@my=0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r4, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1, 0x0, 0x10001}) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TCSETSF(r1, 0x5404, 0x0) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000380)={0x20, 0x1, 0x3, 0x401, 0x0, 0x0, {0x1}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffc, 0x1}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000004}, 0x4004840) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.184' (ED25519) to the list of known hosts. [ 92.195005][ T36] cfg80211: failed to load regulatory.db [ 92.532264][ T5579] cgroup: Unknown subsys name 'net' [ 92.776628][ T5579] cgroup: Unknown subsys name 'cpuset' [ 92.847653][ T5579] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 94.863279][ T5579] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 99.101439][ T5604] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 99.104103][ T5604] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 99.158106][ T5611] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 99.164521][ T5605] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 99.168271][ T5611] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 99.189879][ T5610] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 99.198012][ T5605] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 99.222847][ T5605] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 99.226492][ T5605] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 99.229418][ T5611] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 99.237438][ T5605] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 99.261398][ T5605] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 99.262670][ T5605] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 99.263510][ T5605] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 99.263750][ T5611] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 99.266000][ T5611] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 99.267313][ T5611] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 99.267981][ T5611] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 99.306510][ T5604] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 99.329074][ T4909] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 99.493842][ T5611] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 99.555216][ T5604] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 99.556425][ T5604] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 99.558444][ T5604] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 99.564710][ T5604] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 101.450820][ T5604] Bluetooth: hci3: command tx timeout [ 101.527060][ T5604] Bluetooth: hci2: command tx timeout [ 101.528340][ T5604] Bluetooth: hci0: command tx timeout [ 101.608256][ T5604] Bluetooth: hci1: command tx timeout [ 101.687510][ T5604] Bluetooth: hci4: command tx timeout [ 102.394832][ T5595] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.394931][ T5595] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.395123][ T5595] bridge_slave_0: entered allmulticast mode [ 102.403508][ T5595] bridge_slave_0: entered promiscuous mode [ 102.461887][ T5596] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.462008][ T5596] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.462145][ T5596] bridge_slave_0: entered allmulticast mode [ 102.464058][ T5596] bridge_slave_0: entered promiscuous mode [ 102.510178][ T5595] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.510286][ T5595] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.510476][ T5595] bridge_slave_1: entered allmulticast mode [ 102.512391][ T5595] bridge_slave_1: entered promiscuous mode [ 102.568391][ T5596] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.568526][ T5596] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.568951][ T5596] bridge_slave_1: entered allmulticast mode [ 102.571368][ T5596] bridge_slave_1: entered promiscuous mode [ 102.628513][ T5597] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.628663][ T5597] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.629044][ T5597] bridge_slave_0: entered allmulticast mode [ 102.631196][ T5597] bridge_slave_0: entered promiscuous mode [ 102.634719][ T5594] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.634843][ T5594] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.635024][ T5594] bridge_slave_0: entered allmulticast mode [ 102.653175][ T5594] bridge_slave_0: entered promiscuous mode [ 102.740815][ T5597] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.740968][ T5597] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.741145][ T5597] bridge_slave_1: entered allmulticast mode [ 102.744351][ T5597] bridge_slave_1: entered promiscuous mode [ 102.745669][ T5594] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.745790][ T5594] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.745917][ T5594] bridge_slave_1: entered allmulticast mode [ 102.753589][ T5594] bridge_slave_1: entered promiscuous mode [ 102.832305][ T5595] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.881064][ T5596] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.912829][ T5595] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.954591][ T5596] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.954869][ T5599] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.955064][ T5599] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.955191][ T5599] bridge_slave_0: entered allmulticast mode [ 102.960735][ T5599] bridge_slave_0: entered promiscuous mode [ 103.015594][ T5597] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.034963][ T5594] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.059459][ T5599] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.059566][ T5599] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.062289][ T5599] bridge_slave_1: entered allmulticast mode [ 103.064726][ T5599] bridge_slave_1: entered promiscuous mode [ 103.109892][ T5597] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.113277][ T5594] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.184897][ T5595] team0: Port device team_slave_0 added [ 103.224971][ T5596] team0: Port device team_slave_0 added [ 103.250298][ T5595] team0: Port device team_slave_1 added [ 103.293282][ T5596] team0: Port device team_slave_1 added [ 103.296432][ T5599] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.324930][ T5597] team0: Port device team_slave_0 added [ 103.334039][ T5594] team0: Port device team_slave_0 added [ 103.359088][ T5599] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.385737][ T5597] team0: Port device team_slave_1 added [ 103.394070][ T5594] team0: Port device team_slave_1 added [ 103.431766][ T5595] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.431780][ T5595] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.431801][ T5595] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.503576][ T5596] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.503589][ T5596] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.503610][ T5596] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.527337][ T5604] Bluetooth: hci3: command tx timeout [ 103.560412][ T5595] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.560430][ T5595] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.560459][ T5595] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.607045][ T5604] Bluetooth: hci0: command tx timeout [ 103.617313][ T5604] Bluetooth: hci2: command tx timeout [ 103.641546][ T5596] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.641565][ T5596] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.641594][ T5596] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.645513][ T5599] team0: Port device team_slave_0 added [ 103.688601][ T5604] Bluetooth: hci1: command tx timeout [ 103.697794][ T5597] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.697836][ T5597] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.697907][ T5597] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.705357][ T5594] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.705407][ T5594] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.705480][ T5594] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.782959][ T5604] Bluetooth: hci4: command tx timeout [ 103.803811][ T5599] team0: Port device team_slave_1 added [ 103.809568][ T5597] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.809611][ T5597] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.809696][ T5597] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.814018][ T5594] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.814060][ T5594] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.814158][ T5594] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.387179][ T5599] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.387199][ T5599] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.387231][ T5599] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.457993][ T5599] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.458013][ T5599] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.458042][ T5599] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.542862][ T5595] hsr_slave_0: entered promiscuous mode [ 104.544082][ T5595] hsr_slave_1: entered promiscuous mode [ 104.561931][ T5596] hsr_slave_0: entered promiscuous mode [ 104.562937][ T5596] hsr_slave_1: entered promiscuous mode [ 104.563847][ T5596] debugfs: 'hsr0' already exists in 'hsr' [ 104.563947][ T5596] Cannot create hsr debugfs directory [ 104.639856][ T5594] hsr_slave_0: entered promiscuous mode [ 104.641252][ T5594] hsr_slave_1: entered promiscuous mode [ 104.641931][ T5594] debugfs: 'hsr0' already exists in 'hsr' [ 104.641950][ T5594] Cannot create hsr debugfs directory [ 104.670879][ T5597] hsr_slave_0: entered promiscuous mode [ 104.671893][ T5597] hsr_slave_1: entered promiscuous mode [ 104.672580][ T5597] debugfs: 'hsr0' already exists in 'hsr' [ 104.672599][ T5597] Cannot create hsr debugfs directory [ 104.847778][ T5599] hsr_slave_0: entered promiscuous mode [ 104.848907][ T5599] hsr_slave_1: entered promiscuous mode [ 104.849661][ T5599] debugfs: 'hsr0' already exists in 'hsr' [ 104.849681][ T5599] Cannot create hsr debugfs directory [ 105.607222][ T5604] Bluetooth: hci3: command tx timeout [ 105.697288][ T4909] Bluetooth: hci0: command tx timeout [ 105.697385][ T5604] Bluetooth: hci2: command tx timeout [ 105.767018][ T5604] Bluetooth: hci1: command tx timeout [ 105.858554][ T5604] Bluetooth: hci4: command tx timeout [ 105.886824][ T5595] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 105.953646][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 105.973710][ T5595] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 106.013339][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 106.021387][ T5595] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 106.052960][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 106.088254][ T5595] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 106.112167][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 106.221935][ T5596] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 106.254300][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 106.266055][ T5596] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 106.293782][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 106.309513][ T5596] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 106.351772][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 106.380316][ T5596] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 106.414401][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 106.600493][ T5594] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 106.646823][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 106.675723][ T5594] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 106.711381][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 106.726672][ T5594] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 106.751278][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 106.784386][ T5594] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 106.812504][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 107.078083][ T5597] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 107.111985][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 107.142064][ T5597] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 107.172508][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 107.189746][ T5597] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 107.215280][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 107.253095][ T5597] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 107.296745][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 107.489330][ T5595] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.491674][ T5599] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 107.521674][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 107.545762][ T5599] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 107.580807][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 107.598170][ T5599] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 107.620951][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 107.643095][ T5599] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 107.682662][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 107.689078][ T5604] Bluetooth: hci3: command tx timeout [ 107.779368][ T4909] Bluetooth: hci0: command tx timeout [ 107.779422][ T5604] Bluetooth: hci2: command tx timeout [ 107.813390][ T5595] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.848228][ T5604] Bluetooth: hci1: command tx timeout [ 107.889401][ T5596] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.905103][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.905300][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.927749][ T5604] Bluetooth: hci4: command tx timeout [ 108.004256][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.004371][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.092111][ T5596] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.114673][ T5594] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.166081][ T1162] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.166306][ T1162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.228436][ T1162] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.228527][ T1162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.309396][ T5594] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.363752][ T1162] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.363844][ T1162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.442817][ T5597] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.472771][ T1162] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.472935][ T1162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.685440][ T5597] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.718750][ T5599] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.794481][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.800246][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.871735][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.871857][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.986217][ T5599] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.066416][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.066653][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.149675][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.149811][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.854173][ T5595] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.319832][ T5596] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.345480][ T5595] veth0_vlan: entered promiscuous mode [ 110.432872][ T5595] veth1_vlan: entered promiscuous mode [ 110.668353][ T5594] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.798916][ T5595] veth0_macvtap: entered promiscuous mode [ 110.822601][ T5596] veth0_vlan: entered promiscuous mode [ 110.877594][ T5595] veth1_macvtap: entered promiscuous mode [ 110.956107][ T5599] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.986682][ T5596] veth1_vlan: entered promiscuous mode [ 111.042213][ T5595] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.124162][ T5595] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.210730][ T5594] veth0_vlan: entered promiscuous mode [ 111.223927][ T1162] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.257426][ T1162] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.265496][ T1162] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.290914][ T5597] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.293747][ T1162] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.391934][ T5594] veth1_vlan: entered promiscuous mode [ 111.468807][ T5596] veth0_macvtap: entered promiscuous mode [ 111.563365][ T5596] veth1_macvtap: entered promiscuous mode [ 111.882844][ T153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.882871][ T153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.904644][ T5596] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.996068][ T5596] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.008982][ T5594] veth0_macvtap: entered promiscuous mode [ 112.094479][ T5594] veth1_macvtap: entered promiscuous mode [ 112.120128][ T5597] veth0_vlan: entered promiscuous mode [ 112.144951][ T1508] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.164018][ T1508] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.186598][ T1508] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.205549][ T1162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.205573][ T1162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.233456][ T1508] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.298740][ T5599] veth0_vlan: entered promiscuous mode [ 112.300644][ T5597] veth1_vlan: entered promiscuous mode [ 112.378654][ T5594] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.474209][ T5594] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.536850][ T5599] veth1_vlan: entered promiscuous mode [ 112.794190][ T1508] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.861991][ T1508] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.935816][ T1508] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.955034][ T1508] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.030950][ T1473] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.030972][ T1473] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.232990][ T5597] veth0_macvtap: entered promiscuous mode [ 113.506467][ T5792] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6'. [ 113.575490][ T5597] veth1_macvtap: entered promiscuous mode [ 113.624128][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.624150][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.660268][ T5599] veth0_macvtap: entered promiscuous mode [ 113.960936][ T5599] veth1_macvtap: entered promiscuous mode [ 114.133504][ T5597] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.211204][ T5597] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 114.286734][ T153] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.314749][ T5599] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.331180][ T153] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.449216][ T153] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.453493][ T153] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.564561][ T5599] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 114.668575][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.668596][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.727059][ T1508] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.775432][ T5794] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 114.897366][ T1508] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.928974][ T1162] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.991675][ T1162] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.547992][ T1473] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.548015][ T1473] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.724813][ T1162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.724836][ T1162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.411302][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.411334][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.818819][ T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.818842][ T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.445709][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.445731][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.585766][ T5819] binder: BINDER_SET_CONTEXT_MGR already set [ 118.585780][ T5819] binder: 5818:5819 ioctl 4018620d 200000004a80 returned -16 [ 118.790937][ T5824] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size. [ 119.775676][ T5834] syzkaller0: entered promiscuous mode [ 119.775704][ T5834] syzkaller0: entered allmulticast mode [ 126.380531][ T5886] trusted_key: syz.0.25 sent an empty control message without MSG_MORE. [ 127.136951][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 128.106919][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 128.126903][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 128.156924][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 131.216951][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 131.236939][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 131.256937][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 131.266926][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 131.276975][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 131.336933][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 133.358717][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.361906][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 141.445632][ T5988] syzkaller0: entered promiscuous mode [ 141.445662][ T5988] syzkaller0: entered allmulticast mode [ 141.867614][ T5993] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 145.867762][ T6015] process 'syz.2.59' launched './file1' with NULL argv: empty string added [ 149.861386][ T6039] netlink: 12 bytes leftover after parsing attributes in process `syz.1.67'. [ 155.612861][ T5830] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 156.207034][ T5830] usb 2-1: Using ep0 maxpacket: 16 [ 156.603488][ T6126] comedi comedi0: pcm3724: I/O base address not correctly aligned [ 157.084300][ T5830] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 157.084347][ T5830] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 157.084368][ T5830] usb 2-1: config 0 has no interface number 0 [ 157.413185][ T5830] usb 2-1: string descriptor 0 read error: -71 [ 157.413320][ T5830] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 157.413344][ T5830] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.821457][ T5830] usb 2-1: config 0 descriptor?? [ 157.876131][ T5830] usb 2-1: can't set config #0, error -71 [ 158.012377][ T6131] netlink: 24 bytes leftover after parsing attributes in process `syz.2.86'. [ 158.012420][ T6131] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 158.444034][ T5830] usb 2-1: USB disconnect, device number 2 [ 158.527376][ T5728] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 158.717653][ T5728] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 158.717687][ T5728] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.717710][ T5728] usb 3-1: Product: syz [ 158.717725][ T5728] usb 3-1: Manufacturer: syz [ 158.717741][ T5728] usb 3-1: SerialNumber: syz [ 158.871164][ T5728] usb 3-1: config 0 descriptor?? [ 159.144550][ T5728] i2c-tiny-usb 3-1:0.0: version 6d.cc found at bus 003 address 002 [ 160.190420][ T5728] (null): failure reading functionality [ 160.364523][ T5728] i2c i2c-1: failure reading functionality [ 160.917997][ T5728] i2c i2c-1: connected i2c-tiny-usb device [ 161.345104][ T5728] usb 3-1: USB disconnect, device number 2 [ 161.783278][ T6167] netlink: 28 bytes leftover after parsing attributes in process `syz.2.95'. [ 161.784293][ T6167] netlink: 28 bytes leftover after parsing attributes in process `syz.2.95'. [ 161.784403][ T6167] netlink: 28 bytes leftover after parsing attributes in process `syz.2.95'. [ 161.784563][ T6167] netlink: 28 bytes leftover after parsing attributes in process `syz.2.95'. [ 161.807285][ T6167] netlink: 28 bytes leftover after parsing attributes in process `syz.2.95'. [ 161.807487][ T6167] netlink: 28 bytes leftover after parsing attributes in process `syz.2.95'. [ 161.807568][ T6167] netlink: 28 bytes leftover after parsing attributes in process `syz.2.95'. [ 161.807721][ T6167] netlink: 28 bytes leftover after parsing attributes in process `syz.2.95'. [ 161.807791][ T6167] netlink: 28 bytes leftover after parsing attributes in process `syz.2.95'. [ 162.014254][ T6168] netlink: 'syz.1.94': attribute type 2 has an invalid length. [ 162.130712][ T6161] capability: warning: `syz.4.93' uses 32-bit capabilities (legacy support in use) [ 162.325511][ T6175] veth1_macvtap: left promiscuous mode [ 162.325539][ T6175] macsec0: entered allmulticast mode [ 165.313003][ T6192] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 170.472081][ T6214] tipc: Started in network mode [ 170.472117][ T6214] tipc: Node identity f671c731f046, cluster identity 4711 [ 170.472574][ T6214] tipc: Enabled bearer , priority 0 [ 170.475687][ T6222] syzkaller0: entered promiscuous mode [ 170.475715][ T6222] syzkaller0: entered allmulticast mode [ 173.008455][ T6214] tipc: Resetting bearer [ 173.099062][ T5727] tipc: Node number set to 104318769 [ 175.196008][ T6214] tipc: Resetting bearer [ 175.540635][ T6214] tipc: Disabling bearer [ 183.676429][ T5604] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 183.676487][ T5604] CPU: 1 UID: 0 PID: 5604 Comm: kworker/u9:3 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 183.676523][ T5604] Tainted: [L]=SOFTLOCKUP [ 183.676531][ T5604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 183.676545][ T5604] Workqueue: hci4 hci_rx_work [ 183.676611][ T5604] Call Trace: [ 183.676620][ T5604] [ 183.676629][ T5604] dump_stack_lvl+0xe8/0x150 [ 183.676671][ T5604] sysfs_create_dir_ns+0x271/0x2a0 [ 183.676710][ T5604] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 183.676752][ T5604] ? rt_spin_unlock+0x163/0x200 [ 183.676784][ T5604] kobject_add_internal+0x62c/0xce0 [ 183.676817][ T5604] kobject_add+0x163/0x240 [ 183.676837][ T5604] ? rt_spin_unlock+0x157/0x200 [ 183.676866][ T5604] ? __pfx_kobject_add+0x10/0x10 [ 183.676895][ T5604] ? get_device_parent+0x370/0x3a0 [ 183.676924][ T5604] device_add+0x3fa/0xb80 [ 183.676951][ T5604] hci_conn_add_sysfs+0xd5/0x210 [ 183.676987][ T5604] le_conn_complete_evt+0xfef/0x1580 [ 183.677024][ T5604] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 183.677049][ T5604] ? lockdep_hardirqs_on+0x7a/0x110 [ 183.677081][ T5604] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 183.677123][ T5604] ? rt_mutex_slowunlock+0x219/0x460 [ 183.677150][ T5604] ? skb_pull_data+0xf0/0x200 [ 183.677182][ T5604] hci_le_conn_complete_evt+0x187/0x470 [ 183.677215][ T5604] hci_event_packet+0x67a/0xf10 [ 183.677256][ T5604] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 183.677277][ T5604] ? __pfx_hci_event_packet+0x10/0x10 [ 183.677309][ T5604] ? rt_spin_unlock+0x157/0x200 [ 183.677345][ T5604] ? hci_send_to_monitor+0xe2/0x590 [ 183.677375][ T5604] hci_rx_work+0x3ee/0x1020 [ 183.677417][ T5604] ? process_scheduled_works+0xa20/0x14e0 [ 183.677444][ T5604] process_scheduled_works+0xa8e/0x14e0 [ 183.677502][ T5604] ? __pfx_process_scheduled_works+0x10/0x10 [ 183.677536][ T5604] ? assign_work+0x3cf/0x5d0 [ 183.677566][ T5604] worker_thread+0xa47/0xfb0 [ 183.677625][ T5604] kthread+0x388/0x470 [ 183.677658][ T5604] ? __pfx_worker_thread+0x10/0x10 [ 183.677683][ T5604] ? __pfx_kthread+0x10/0x10 [ 183.677718][ T5604] ret_from_fork+0x514/0xb70 [ 183.677755][ T5604] ? __pfx_ret_from_fork+0x10/0x10 [ 183.677789][ T5604] ? __switch_to+0xc89/0x1420 [ 183.677822][ T5604] ? __pfx_kthread+0x10/0x10 [ 183.677856][ T5604] ret_from_fork_asm+0x1a/0x30 [ 183.677898][ T5604] [ 183.680691][ T5604] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 183.680744][ T5604] Bluetooth: hci4: failed to register connection device [ 184.062656][ T5604] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 184.087279][ T5604] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 184.137196][ T5604] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 184.138833][ T5604] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 184.141518][ T5604] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 184.537027][ T5713] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 184.554045][ T5830] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 184.724898][ T5713] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 184.724958][ T5713] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 184.724984][ T5713] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.768389][ T5830] usb 2-1: config 0 has an invalid interface number: 207 but max is 0 [ 184.768418][ T5830] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 184.768438][ T5830] usb 2-1: config 0 has no interface number 0 [ 184.828746][ T5830] usb 2-1: New USB device found, idVendor=12d1, idProduct=ed56, bcdDevice=46.dd [ 184.828777][ T5830] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.828799][ T5830] usb 2-1: Product: syz [ 184.828814][ T5830] usb 2-1: Manufacturer: syz [ 184.828830][ T5830] usb 2-1: SerialNumber: syz [ 184.881419][ T5830] usb 2-1: config 0 descriptor?? [ 185.151397][ T5713] usb 3-1: config 0 descriptor?? [ 185.385064][ T5713] pwc: Askey VC010 type 2 USB webcam detected. [ 185.638586][ T5713] pwc: recv_control_msg error -32 req 02 val 2b00 [ 185.640571][ T5713] pwc: recv_control_msg error -32 req 02 val 2700 [ 185.650301][ T5713] pwc: recv_control_msg error -32 req 02 val 2c00 [ 185.653704][ T5713] pwc: recv_control_msg error -32 req 04 val 1000 [ 185.657322][ T5713] pwc: recv_control_msg error -32 req 04 val 1300 [ 185.661746][ T5713] pwc: recv_control_msg error -32 req 04 val 1400 [ 185.665051][ T5713] pwc: recv_control_msg error -32 req 02 val 2000 [ 185.676453][ T5713] pwc: recv_control_msg error -32 req 02 val 2100 [ 185.683937][ T5713] pwc: recv_control_msg error -32 req 04 val 1500 [ 185.685302][ T5713] pwc: recv_control_msg error -32 req 02 val 2500 [ 185.686487][ T5713] pwc: recv_control_msg error -32 req 02 val 2400 [ 185.695135][ T5713] pwc: recv_control_msg error -32 req 02 val 2600 [ 186.176322][ T5713] pwc: recv_control_msg error -71 req 02 val 2800 [ 186.215686][ T5713] pwc: recv_control_msg error -71 req 04 val 1100 [ 186.216086][ T5713] pwc: recv_control_msg error -71 req 04 val 1200 [ 186.372547][ T5713] pwc: Registered as video103. [ 186.407255][ T4909] Bluetooth: hci5: command tx timeout [ 186.457256][ T5713] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input5 [ 186.532219][ T5713] usb 3-1: USB disconnect, device number 3 [ 187.496015][ T5728] usb 2-1: USB disconnect, device number 3 [ 188.488674][ T4909] Bluetooth: hci5: command tx timeout [ 190.282563][ T6317] futex_wake_op: syz.2.133 tries to shift op by 36; fix this program [ 191.316667][ T4909] Bluetooth: hci5: command tx timeout [ 193.367094][ T4909] Bluetooth: hci5: command tx timeout [ 194.428602][ T5612] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 194.583604][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.583678][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 198.042716][ T5612] usb 2-1: unable to get BOS descriptor or descriptor too short [ 198.043771][ T5612] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 198.043822][ T5612] usb 2-1: can't read configurations, error -71 [ 198.300394][ T6358] block nbd2: shutting down sockets [ 198.360677][ T6362] block nbd2: NBD_DISCONNECT [ 198.360708][ T6362] block nbd2: Send disconnect failed -32 [ 200.214403][ T1508] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.417055][ T6346] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 203.512043][ T1508] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.617144][ T6346] usb 3-1: Using ep0 maxpacket: 16 [ 203.624226][ T6346] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 203.624252][ T6346] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 203.626740][ T6346] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 203.626771][ T6346] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.626791][ T6346] usb 3-1: Product: syz [ 203.626811][ T6346] usb 3-1: Manufacturer: syz [ 203.628016][ T6346] usb 3-1: SerialNumber: syz [ 206.699191][ T6346] usb 3-1: 0:2 : does not exist [ 206.861622][ T6346] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 207.203032][ T1508] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.154359][ T5604] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 210.196532][ T5604] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 210.241022][ T5604] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 210.254325][ T5604] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 210.287090][ T5604] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 210.948919][ T6346] usb 3-1: USB disconnect, device number 4 [ 212.491895][ T4909] Bluetooth: hci0: command tx timeout [ 213.545388][ T1508] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.563778][ T6267] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.564008][ T6267] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.566776][ T6267] bridge_slave_0: entered allmulticast mode [ 214.566989][ T4909] Bluetooth: hci0: command tx timeout [ 214.613145][ T6267] bridge_slave_0: entered promiscuous mode [ 214.635910][ T6267] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.636146][ T6267] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.636388][ T6267] bridge_slave_1: entered allmulticast mode [ 214.674503][ T6267] bridge_slave_1: entered promiscuous mode [ 214.833792][ T5787] udevd[5787]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 215.775996][ T6462] kvm: kvm [6460]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0xe988 [ 216.073651][ T6464] tipc: Started in network mode [ 216.073684][ T6464] tipc: Node identity c2055116792d, cluster identity 4711 [ 216.073879][ T6464] tipc: Enabled bearer , priority 0 [ 217.063529][ T4909] Bluetooth: hci0: command tx timeout [ 218.482536][ T6267] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 218.520608][ T6463] tipc: Resetting bearer [ 218.589245][ T6457] tipc: Disabling bearer [ 218.963233][ T6346] tipc: Node number set to 3139981590 [ 218.982793][ T6267] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 219.133433][ T4909] Bluetooth: hci0: command tx timeout [ 219.353957][ T6267] team0: Port device team_slave_0 added [ 219.402052][ T6267] team0: Port device team_slave_1 added [ 219.925788][ T6496] __nla_validate_parse: 11 callbacks suppressed [ 219.925836][ T6496] netlink: 20 bytes leftover after parsing attributes in process `syz.3.175'. [ 221.508597][ T6267] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 221.508611][ T6267] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 221.508652][ T6267] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 221.643256][ T6267] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 221.643270][ T6267] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 221.643291][ T6267] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 222.017846][ T6504] mmap: syz.1.178 (6504) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 223.600922][ T4909] Bluetooth: hci3: command 0x0406 tx timeout [ 223.600963][ T4909] Bluetooth: hci1: command 0x0406 tx timeout [ 223.601173][ T4909] Bluetooth: hci2: command 0x0406 tx timeout [ 225.690199][ T5604] Bluetooth: hci1: unexpected event for opcode 0x042c [ 225.712701][ T5604] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 227.658571][ T6267] hsr_slave_0: entered promiscuous mode [ 227.676480][ T6267] hsr_slave_1: entered promiscuous mode [ 227.683226][ T6267] debugfs: 'hsr0' already exists in 'hsr' [ 227.683248][ T6267] Cannot create hsr debugfs directory [ 228.989785][ T1508] bridge_slave_1: left allmulticast mode [ 228.989992][ T1508] bridge_slave_1: left promiscuous mode [ 229.058126][ T1508] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.448651][ T1508] bridge_slave_0: left allmulticast mode [ 230.448700][ T1508] bridge_slave_0: left promiscuous mode [ 230.472914][ T1508] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.777079][ T6544] netlink: 8 bytes leftover after parsing attributes in process `syz.1.188'. [ 233.512972][ T37] audit: type=1800 audit(1783627057.479:2): pid=6559 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.193" name="file0" dev="overlay" ino=214 res=0 errno=0 [ 233.513022][ T37] audit: type=1804 audit(1783627057.509:3): pid=6559 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.3.193" name="/newroot/37/bus/file0" dev="overlay" ino=214 res=1 errno=0 [ 237.589736][ T1508] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 237.931927][ T1508] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 238.024748][ T1508] bond0 (unregistering): Released all slaves [ 243.490157][ T37] audit: type=1326 audit(1783627067.499:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6613 comm="syz.1.206" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f33d2d3de59 code=0x0 [ 243.490487][ T6617] netlink: 8 bytes leftover after parsing attributes in process `syz.3.207'. [ 243.714273][ T5611] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 243.753615][ T5611] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 243.762482][ T5611] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 243.785228][ T5611] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 243.786429][ T5611] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 244.131085][ T6267] ================================================================== [ 244.131098][ T6267] BUG: KASAN: slab-use-after-free in rt_spin_lock+0x83/0x400 [ 244.131126][ T6267] Read of size 1 at addr ffff88806a3ee7e8 by task syz-executor/6267 [ 244.131139][ T6267] [ 244.131152][ T6267] CPU: 0 UID: 0 PID: 6267 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 244.131177][ T6267] Tainted: [L]=SOFTLOCKUP [ 244.131182][ T6267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 244.131196][ T6267] Call Trace: [ 244.131202][ T6267] [ 244.131209][ T6267] dump_stack_lvl+0xe8/0x150 [ 244.131260][ T6267] print_address_description+0x55/0x1e0 [ 244.131295][ T6267] ? rt_spin_lock+0x83/0x400 [ 244.131317][ T6267] print_report+0x58/0x70 [ 244.131347][ T6267] kasan_report+0x117/0x150 [ 244.131373][ T6267] ? rt_spin_lock+0x83/0x400 [ 244.131402][ T6267] ? bt_accept_unlink+0x7d/0x2f0 [ 244.131417][ T6267] __kasan_check_byte+0x2a/0x40 [ 244.131433][ T6267] lock_acquire+0x84/0x350 [ 244.131449][ T6267] ? __local_bh_disable_ip+0x3c/0x420 [ 244.131471][ T6267] rt_spin_lock+0x83/0x400 [ 244.131487][ T6267] ? bt_accept_unlink+0x7d/0x2f0 [ 244.131502][ T6267] ? __pfx_rt_spin_lock+0x10/0x10 [ 244.131519][ T6267] ? rcu_is_watching+0x15/0xb0 [ 244.131536][ T6267] ? __local_bh_disable_ip+0x3c/0x420 [ 244.131554][ T6267] ? bt_accept_unlink+0x61/0x2f0 [ 244.131569][ T6267] bt_accept_unlink+0x7d/0x2f0 [ 244.131583][ T6267] ? bt_accept_unlink+0x61/0x2f0 [ 244.131597][ T6267] l2cap_sock_teardown_cb+0x17e/0x490 [ 244.131628][ T6267] l2cap_chan_del+0x98/0x600 [ 244.131651][ T6267] l2cap_conn_del+0x2f2/0x520 [ 244.131671][ T6267] ? __pfx_l2cap_disconn_cfm+0x10/0x10 [ 244.131712][ T6267] hci_conn_hash_flush+0x105/0x260 [ 244.131746][ T6267] hci_dev_close_sync+0x7fc/0x10a0 [ 244.131768][ T6267] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 244.131783][ T6267] ? lockdep_hardirqs_on+0x7a/0x110 [ 244.131805][ T6267] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 244.131828][ T6267] ? mutex_lock_nested+0x152/0x1d0 [ 244.131845][ T6267] ? hci_unregister_dev+0x22a/0x5b0 [ 244.131869][ T6267] hci_unregister_dev+0x232/0x5b0 [ 244.131893][ T6267] vhci_release+0x170/0x1c0 [ 244.131916][ T6267] ? __pfx_vhci_release+0x10/0x10 [ 244.131936][ T6267] __fput+0x42a/0xa80 [ 244.131954][ T6267] task_work_run+0x1d9/0x270 [ 244.131979][ T6267] ? __pfx_task_work_run+0x10/0x10 [ 244.132003][ T6267] ? do_exit+0x735/0x2360 [ 244.132024][ T6267] ? kmem_cache_free+0x187/0x6c0 [ 244.132040][ T6267] ? put_net+0x191/0x260 [ 244.132057][ T6267] ? do_exit+0x735/0x2360 [ 244.132081][ T6267] do_exit+0x73a/0x2360 [ 244.132103][ T6267] ? lockdep_hardirqs_on+0x7a/0x110 [ 244.132127][ T6267] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 244.132151][ T6267] ? __pfx_do_exit+0x10/0x10 [ 244.132173][ T6267] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 244.132190][ T6267] ? rt_spin_lock+0x1e0/0x400 [ 244.132210][ T6267] ? rt_spin_unlock+0x157/0x200 [ 244.132229][ T6267] do_group_exit+0x22d/0x2f0 [ 244.132252][ T6267] ? rt_spin_unlock+0x163/0x200 [ 244.132270][ T6267] get_signal+0x121b/0x12c0 [ 244.132296][ T6267] arch_do_signal_or_restart+0xbb/0x860 [ 244.132319][ T6267] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 244.132340][ T6267] ? kmem_cache_free+0x526/0x6c0 [ 244.132385][ T6267] exit_to_user_mode_loop+0x104/0x730 [ 244.132407][ T6267] ? rcu_is_watching+0x15/0xb0 [ 244.132433][ T6267] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.132457][ T6267] do_syscall_64+0x353/0x580 [ 244.132490][ T6267] ? clear_bhb_loop+0x40/0x90 [ 244.132508][ T6267] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.132523][ T6267] RIP: 0033:0x7fb8519de68e [ 244.132543][ T6267] Code: Unable to access opcode bytes at 0x7fb8519de664. [ 244.132550][ T6267] RSP: 002b:00007fffd4b83bc8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 244.132567][ T6267] RAX: 000000000000005c RBX: 0000555557ac8500 RCX: 00007fb8519de68e [ 244.132578][ T6267] RDX: 000000000000005c RSI: 00007fb8527d4670 RDI: 0000000000000003 [ 244.132588][ T6267] RBP: 0000000000000001 R08: 00007fffd4b83c44 R09: 000000000000000c [ 244.132598][ T6267] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 244.132607][ T6267] R13: 0000000000000000 R14: 00007fb8527d4670 R15: 0000000000000000 [ 244.132629][ T6267] [ 244.132635][ T6267] [ 244.132639][ T6267] Allocated by task 5787: [ 244.132646][ T6267] kasan_save_track+0x3e/0x80 [ 244.132659][ T6267] __kasan_kmalloc+0x93/0xb0 [ 244.132673][ T6267] __kmalloc_noprof+0x41a/0x780 [ 244.132685][ T6267] tomoyo_realpath_from_path+0xef/0x640 [ 244.132704][ T6267] tomoyo_check_open_permission+0x229/0x470 [ 244.132728][ T6267] security_file_open+0xa9/0x240 [ 244.132742][ T6267] do_dentry_open+0x4be/0x1420 [ 244.132764][ T6267] vfs_open+0x3b/0x350 [ 244.132784][ T6267] path_openat+0x2e60/0x3850 [ 244.132800][ T6267] do_file_open+0x23e/0x4a0 [ 244.132816][ T6267] do_sys_openat2+0x115/0x200 [ 244.132827][ T6267] __x64_sys_openat+0x138/0x170 [ 244.132839][ T6267] do_syscall_64+0x174/0x580 [ 244.132860][ T6267] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.132891][ T6267] [ 244.132895][ T6267] Freed by task 5787: [ 244.132905][ T6267] kasan_save_track+0x3e/0x80 [ 244.132926][ T6267] kasan_save_free_info+0x40/0x50 [ 244.132945][ T6267] __kasan_slab_free+0x5c/0x80 [ 244.132958][ T6267] kfree+0x1c5/0x6c0 [ 244.132978][ T6267] tomoyo_realpath_from_path+0x605/0x640 [ 244.132995][ T6267] tomoyo_check_open_permission+0x229/0x470 [ 244.133018][ T6267] security_file_open+0xa9/0x240 [ 244.133032][ T6267] do_dentry_open+0x4be/0x1420 [ 244.133052][ T6267] vfs_open+0x3b/0x350 [ 244.133073][ T6267] path_openat+0x2e60/0x3850 [ 244.133088][ T6267] do_file_open+0x23e/0x4a0 [ 244.133104][ T6267] do_sys_openat2+0x115/0x200 [ 244.133117][ T6267] __x64_sys_openat+0x138/0x170 [ 244.133129][ T6267] do_syscall_64+0x174/0x580 [ 244.133150][ T6267] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.133164][ T6267] [ 244.133167][ T6267] The buggy address belongs to the object at ffff88806a3ee000 [ 244.133167][ T6267] which belongs to the cache kmalloc-4k of size 4096 [ 244.133180][ T6267] The buggy address is located 2024 bytes inside of [ 244.133180][ T6267] freed 4096-byte region [ffff88806a3ee000, ffff88806a3ef000) [ 244.133196][ T6267] [ 244.133200][ T6267] The buggy address belongs to the physical page: [ 244.133216][ T6267] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x6a3e8 [ 244.133230][ T6267] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 244.133242][ T6267] flags: 0x80000000000040(head|node=0|zone=1) [ 244.133258][ T6267] page_type: f5(slab) [ 244.133272][ T6267] raw: 0080000000000040 ffff88813ffb5140 dead000000000100 dead000000000122 [ 244.133285][ T6267] raw: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000 [ 244.133300][ T6267] head: 0080000000000040 ffff88813ffb5140 dead000000000100 dead000000000122 [ 244.133313][ T6267] head: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000 [ 244.133327][ T6267] head: 0080000000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 244.133340][ T6267] head: 000000000000032d 0000000000000000 00000000ffffffff 0000000000000008 [ 244.133348][ T6267] page dumped because: kasan: bad access detected [ 244.133356][ T6267] page_owner tracks the page as allocated [ 244.133361][ T6267] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6274, tgid 6261 (syz.4.122), ts 182953870835, free_ts 181243040200 [ 244.133388][ T6267] post_alloc_hook+0x1f9/0x250 [ 244.133411][ T6267] get_page_from_freelist+0x262a/0x26a0 [ 244.133427][ T6267] __alloc_frozen_pages_noprof+0x18d/0x380 [ 244.133459][ T6267] allocate_slab+0x79/0x5e0 [ 244.133485][ T6267] refill_objects+0x2d8/0x350 [ 244.133511][ T6267] __pcs_replace_empty_main+0x330/0x690 [ 244.133536][ T6267] __kmalloc_noprof+0x544/0x780 [ 244.133556][ T6267] sk_prot_alloc+0xe7/0x210 [ 244.133584][ T6267] sk_alloc+0x3a/0x390 [ 244.133605][ T6267] bt_sock_alloc+0x3b/0x340 [ 244.133633][ T6267] l2cap_sock_create+0x15a/0x300 [ 244.133651][ T6267] bt_sock_create+0x163/0x240 [ 244.133664][ T6267] __sock_create+0x4b3/0x9d0 [ 244.133682][ T6267] __sys_socket+0xd6/0x1b0 [ 244.133700][ T6267] __x64_sys_socket+0x7a/0x90 [ 244.133718][ T6267] do_syscall_64+0x174/0x580 [ 244.133743][ T6267] page last free pid 6268 tgid 6268 stack trace: [ 244.133752][ T6267] __free_frozen_pages+0x10e7/0x11c0 [ 244.133764][ T6267] __slab_free+0x252/0x2a0 [ 244.133777][ T6267] qlist_free_all+0x99/0x100 [ 244.133799][ T6267] kasan_quarantine_reduce+0x148/0x160 [ 244.133820][ T6267] __kasan_slab_alloc+0x22/0x80 [ 244.133833][ T6267] kmem_cache_alloc_noprof+0x355/0x650 [ 244.133856][ T6267] ptlock_alloc+0x20/0x70 [ 244.133868][ T6267] pte_alloc_one+0x7e/0x380 [ 244.133883][ T6267] __pte_alloc+0x25/0x1a0 [ 244.133899][ T6267] do_pte_missing+0x1bda/0x28f0 [ 244.133914][ T6267] handle_mm_fault+0xd28/0x13f0 [ 244.133937][ T6267] do_user_addr_fault+0xa4d/0x1340 [ 244.133959][ T6267] exc_page_fault+0x6a/0xc0 [ 244.133999][ T6267] asm_exc_page_fault+0x26/0x30 [ 244.134021][ T6267] [ 244.134025][ T6267] Memory state around the buggy address: [ 244.134033][ T6267] ffff88806a3ee680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 244.134043][ T6267] ffff88806a3ee700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 244.134053][ T6267] >ffff88806a3ee780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 244.134061][ T6267] ^ [ 244.134069][ T6267] ffff88806a3ee800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 244.134079][ T6267] ffff88806a3ee880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 244.134087][ T6267] ================================================================== [ 244.144486][ T6267] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 244.144511][ T6267] CPU: 0 UID: 0 PID: 6267 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 244.144542][ T6267] Tainted: [L]=SOFTLOCKUP [ 244.144550][ T6267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 244.144598][ T6267] Call Trace: [ 244.144628][ T6267] [ 244.144649][ T6267] vpanic+0x56c/0xa60 [ 244.144720][ T6267] ? __pfx_vpanic+0x10/0x10 [ 244.144774][ T6267] ? __pfx___schedule+0x10/0x10 [ 244.144857][ T6267] panic+0xc5/0xd0 [ 244.144909][ T6267] ? __pfx_panic+0x10/0x10 [ 244.144962][ T6267] ? preempt_schedule_common+0x82/0xd0 [ 244.145054][ T6267] ? rt_spin_lock+0x83/0x400 [ 244.145109][ T6267] check_panic_on_warn+0x89/0xb0 [ 244.145138][ T6267] ? rt_spin_lock+0x83/0x400 [ 244.145157][ T6267] end_report+0x73/0x170 [ 244.145191][ T6267] ? rt_spin_lock+0x83/0x400 [ 244.145246][ T6267] kasan_report+0x128/0x150 [ 244.145309][ T6267] ? rt_spin_lock+0x83/0x400 [ 244.145381][ T6267] ? bt_accept_unlink+0x7d/0x2f0 [ 244.145426][ T6267] __kasan_check_byte+0x2a/0x40 [ 244.145485][ T6267] lock_acquire+0x84/0x350 [ 244.145506][ T6267] ? __local_bh_disable_ip+0x3c/0x420 [ 244.145534][ T6267] rt_spin_lock+0x83/0x400 [ 244.145556][ T6267] ? bt_accept_unlink+0x7d/0x2f0 [ 244.145576][ T6267] ? __pfx_rt_spin_lock+0x10/0x10 [ 244.145600][ T6267] ? rcu_is_watching+0x15/0xb0 [ 244.145634][ T6267] ? __local_bh_disable_ip+0x3c/0x420 [ 244.145660][ T6267] ? bt_accept_unlink+0x61/0x2f0 [ 244.145680][ T6267] bt_accept_unlink+0x7d/0x2f0 [ 244.145700][ T6267] ? bt_accept_unlink+0x61/0x2f0 [ 244.145722][ T6267] l2cap_sock_teardown_cb+0x17e/0x490 [ 244.145754][ T6267] l2cap_chan_del+0x98/0x600 [ 244.145788][ T6267] l2cap_conn_del+0x2f2/0x520 [ 244.145816][ T6267] ? __pfx_l2cap_disconn_cfm+0x10/0x10 [ 244.145842][ T6267] hci_conn_hash_flush+0x105/0x260 [ 244.145873][ T6267] hci_dev_close_sync+0x7fc/0x10a0 [ 244.145902][ T6267] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 244.145924][ T6267] ? lockdep_hardirqs_on+0x7a/0x110 [ 244.145954][ T6267] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 244.145986][ T6267] ? mutex_lock_nested+0x152/0x1d0 [ 244.146009][ T6267] ? hci_unregister_dev+0x22a/0x5b0 [ 244.146044][ T6267] hci_unregister_dev+0x232/0x5b0 [ 244.146079][ T6267] vhci_release+0x170/0x1c0 [ 244.146109][ T6267] ? __pfx_vhci_release+0x10/0x10 [ 244.146135][ T6267] __fput+0x42a/0xa80 [ 244.146160][ T6267] task_work_run+0x1d9/0x270 [ 244.146195][ T6267] ? __pfx_task_work_run+0x10/0x10 [ 244.146227][ T6267] ? do_exit+0x735/0x2360 [ 244.146257][ T6267] ? kmem_cache_free+0x187/0x6c0 [ 244.146279][ T6267] ? put_net+0x191/0x260 [ 244.146302][ T6267] ? do_exit+0x735/0x2360 [ 244.146334][ T6267] do_exit+0x73a/0x2360 [ 244.146365][ T6267] ? lockdep_hardirqs_on+0x7a/0x110 [ 244.146395][ T6267] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 244.146430][ T6267] ? __pfx_do_exit+0x10/0x10 [ 244.146461][ T6267] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 244.146485][ T6267] ? rt_spin_lock+0x1e0/0x400 [ 244.146513][ T6267] ? rt_spin_unlock+0x157/0x200 [ 244.146540][ T6267] do_group_exit+0x22d/0x2f0 [ 244.146570][ T6267] ? rt_spin_unlock+0x163/0x200 [ 244.146596][ T6267] get_signal+0x121b/0x12c0 [ 244.146641][ T6267] arch_do_signal_or_restart+0xbb/0x860 [ 244.146672][ T6267] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 244.146701][ T6267] ? kmem_cache_free+0x526/0x6c0 [ 244.146754][ T6267] exit_to_user_mode_loop+0x104/0x730 [ 244.146775][ T6267] ? rcu_is_watching+0x15/0xb0 [ 244.146799][ T6267] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.146820][ T6267] do_syscall_64+0x353/0x580 [ 244.146854][ T6267] ? clear_bhb_loop+0x40/0x90 [ 244.146877][ T6267] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.146899][ T6267] RIP: 0033:0x7fb8519de68e [ 244.146919][ T6267] Code: Unable to access opcode bytes at 0x7fb8519de664. [ 244.146930][ T6267] RSP: 002b:00007fffd4b83bc8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 244.146954][ T6267] RAX: 000000000000005c RBX: 0000555557ac8500 RCX: 00007fb8519de68e [ 244.146969][ T6267] RDX: 000000000000005c RSI: 00007fb8527d4670 RDI: 0000000000000003 [ 244.146983][ T6267] RBP: 0000000000000001 R08: 00007fffd4b83c44 R09: 000000000000000c [ 244.146996][ T6267] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 244.147009][ T6267] R13: 0000000000000000 R14: 00007fb8527d4670 R15: 0000000000000000 [ 244.147033][ T6267] [ 244.147667][ T6267] Kernel Offset: disabled