last executing test programs: 23.461955539s ago: executing program 3 (id=4): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r1, 0x2, &(0x7f0000000000)=0x80000000000003) syz_open_procfs(0x0, &(0x7f0000000480)='fd/3\x00') 21.117688739s ago: executing program 3 (id=13): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) preadv(r2, &(0x7f0000000500)=[{0x0}, {&(0x7f0000000680)=""/180, 0x120}], 0x2, 0x6, 0x7) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0xa82, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f0000000900)={0x0, 0x1}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000003c0), 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/rtc/rtc0/wakealarm\x00', 0x80002, 0x13) write$cgroup_pid(r4, &(0x7f0000000380), 0x12) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f0000000980)={0x0, 0x1}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/netdevsim/devices/netdevsim10/sriov_numvfs\x00', 0x1, 0x0) write(r5, &(0x7f0000000600)='1', 0x1) r6 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/devices/system/cpu/cpu1/hotplug/target\x00', 0x1, 0x0) write(r6, &(0x7f0000000100)='0', 0x1) 14.800068233s ago: executing program 0 (id=23): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x109000, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x101, 0x0) writev(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x3bf, 0xf88, 0x14a}}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) 13.435901924s ago: executing program 0 (id=25): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f000000cbc0)=[{{0x0, 0x0, &(0x7f00000034c0)=[{&(0x7f0000000640)=';', 0x1}], 0x1}}], 0x1, 0x4) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000000)={0x1, 0x5, 0x0, 0x2, 0x1, 0x27, 0x0, 0x7}, 0x20) 13.073031059s ago: executing program 3 (id=26): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000030000", @ANYRES32=r2, @ANYBLOB="06001a01010000000500c20009000000060014010700000006001000e0"], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4008014) 12.595156227s ago: executing program 0 (id=27): r0 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000480)={'fscrypt:', @desc2}, &(0x7f0000000100)={0x0, "00379bce195566778899aabbccddfcff00112233445566778899aabbccddeeff000011688e0346d524b29db701e5ddeeff80000000000000000000000000007f", 0x40}, 0x48, r0) r1 = socket(0x3a, 0x2, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f0000000580)={0x18, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x1}}, 0x18) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000080)={0x24, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys_sec\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) read$FUSE(r3, &(0x7f0000002180)={0x2020}, 0x2020) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x1, 0x0, @empty, 0x2}}, {{0xa, 0x4e23, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x108) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x0, 0x30, 0x30, 0x0, 0x30, 0x30, 0x31, 0x30, 0x65, 0x30, 0x30, 0x35, 0x64, 0x63]}, &(0x7f0000000a40)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x20}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000005c0)={'fscrypt:', @auto=[0x37, 0x36, 0x31, 0x37, 0x66, 0x37, 0x30, 0x61, 0x122e50c9cecbd0b3, 0x37, 0x39, 0x32, 0x66, 0x30, 0x65, 0x36]}, &(0x7f0000000780)={0x0, "1b699af42db82c6710f15d09fa0ede2b461f72d024151675e76fedfc6ce85406fac0c4833efb1d72293c4e60c0cadb646c435e077ecbb2e7968117a70a9a1090", 0x2d}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x34, 0x35, 0x30, 0x30, 0x65, 0x62, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32, 0x30, 0x30, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/profiling', 0x2caac0, 0x98) write$FUSE_DIRENT(r4, &(0x7f0000000480)=ANY=[], 0xfd72) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x32, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x33, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x38, 0x30, 0x66, 0x30, 0x30, 0x30, 0x30, 0x0, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x15}, 0x48, r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./security\x00', &(0x7f0000000200)='securityfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./security/apparmor/.load\x00', 0x1, 0x0) write(r5, &(0x7f0000000400)="04080076657273696f6e00020500030004080070726f66696c6500070502002f00040600666c616773000702000000000200000000020000000008020000000002000000000200000000020000000008", 0x50) 12.263859875s ago: executing program 3 (id=28): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_setup(0x5, &(0x7f0000000300)) 11.538699862s ago: executing program 0 (id=29): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000380)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(0xffffffffffffffff, 0x3ba0, &(0x7f0000000180)={0x48, 0x15, 0x0, 0x0, r0}) r1 = openat(0xffffffffffffffff, 0x0, 0x2, 0x200) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) fchmodat(r1, &(0x7f0000000100)='./file0\x00', 0x8) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xa, 0x18, 0x8, 0x40, 0x42, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000700), &(0x7f00000004c0), 0x1000, r4}, 0x38) 11.103019463s ago: executing program 3 (id=31): mkdirat(0xffffffffffffff9c, 0x0, 0x43) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) socket(0x11, 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000fc0)='net/packet\x00') preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/105, 0x69}], 0x1, 0x42, 0x3) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) remap_file_pages(&(0x7f000052f000/0x3000)=nil, 0x3000, 0x3000009, 0x0, 0x20) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x80000001, @private1, 0x3}], 0x1c) shutdown(r2, 0x2) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000440)={0x0, 0xfffffffc, 0xffdffff8, 0xffffffff, 0x8, "ff000000000000000000000000000200"}) r5 = syz_open_pts(r4, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000000)=0x13) ioctl$TIOCSTI(r5, 0x5412, &(0x7f00000001c0)=0xa) 7.79023413s ago: executing program 0 (id=35): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) close(r0) socketpair$unix(0xa, 0x2, 0x11, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x101100, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x40047451, &(0x7f00000002c0)) 7.747233801s ago: executing program 2 (id=36): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000040)={0x28, 0x7, 0x0, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r2, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x16f97b}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, r2, 0x0, 0x10001, 0x0, 0x1, 0xd6fe2, 0x2fc247}) close_range(r0, 0xffffffffffffffff, 0x0) 7.266809343s ago: executing program 4 (id=37): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f000000cbc0)=[{{&(0x7f0000000180)={0xa, 0x4e24, 0x7, @local, 0x3}, 0x1c, 0x0}}], 0x1, 0x4) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000000)={0x1, 0x5, 0x0, 0x2, 0x1, 0x27, 0x0, 0x7}, 0x20) 7.11578741s ago: executing program 2 (id=39): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./tracefs/dynamic_events\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='e:mygroup/myevent sched.sched_switch', 0x24) openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs/events/mygroup/myevent/enable\x00', 0x2, 0x0) creat(&(0x7f00000000c0)='./tracefs/dynamic_events\x00', 0x0) 6.873784134s ago: executing program 4 (id=40): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x14, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$XFS_IOC_DIOINFO(0xffffffffffffffff, 0x800c581e, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r3) mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) 6.776676714s ago: executing program 0 (id=41): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$pppl2tp(0x18, 0x1, 0x1) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24000045, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/events/sched/filter\x00', 0x1, 0x0) write(r2, &(0x7f0000000400), 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000780)={0xaa, 0x30}) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa08, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) io_uring_setup(0x30c1, &(0x7f0000000040)={0x0, 0xc89f, 0x0, 0x0, 0x1b0}) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, 0x0) 6.605816649s ago: executing program 1 (id=42): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080) 5.637675021s ago: executing program 1 (id=43): r0 = fsopen(0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r1) fanotify_init(0x2, 0x800) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 5.637321392s ago: executing program 4 (id=44): r0 = io_uring_setup(0x4822, &(0x7f0000000100)={0x0, 0x0, 0x400, 0x3, 0xfa}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x0, 0x98, 0x130, 0x1c8, 0x2f8, 0x0, 0x98, 0x130, 0x260, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x0, 0x3}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) listen(r2, 0x8) connect$inet(r3, &(0x7f0000000010)={0x2, 0x4e20, @loopback}, 0x10) r4 = accept$inet(r2, 0x0, 0x0) sendto(r4, &(0x7f0000000700)='a', 0x1, 0x11, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 5.434162136s ago: executing program 4 (id=45): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_SYNTH_ID(r1, 0xc08c5114, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000001100), r3) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r3, 0x0, 0x4) r4 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f0000000140)={'dt2801\x00', [0x294, 0x8, 0x7fffffff, 0x8, 0x2f, 0x2006, 0xf1, 0xa, 0x80ffa, 0x2, 0x0, 0x7, 0x0, 0x1000004, 0x1, 0x10000, 0xffffffa8, 0x7ffffffd, 0x1ef, 0x200009ea, 0x20000010, 0x55, 0x8, 0x4008, 0x746f, 0x8, 0x6, 0x4, 0xee, 0x4, 0x7ffd]}) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x22a441, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x0) ioctl$TUNSETOWNER(r5, 0x400454cc, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[], 0x38}}, 0x2400404e) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000980)={0x800}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000042000102000007c8b26bbb884b6b"], 0x14}, 0x1, 0x0, 0x0, 0x20044051}, 0x0) connect$llc(r6, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@gettfilter={0x4c, 0x2e, 0x2, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x8, 0x5}, {0xffff, 0xd}, {0x7, 0x9}}, [{0x8, 0xb, 0xa05}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x7fffffff}, {0x8, 0xb, 0xfffffff8}, {0x8, 0xb, 0xffffffff}]}, 0x4c}}, 0x0) 5.299423158s ago: executing program 2 (id=46): openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) write$sndseq(r0, &(0x7f00000008c0)=[{0x0, 0x38, 0xe, 0xfd, @time, {}, {0xe}, @result}], 0x1c) 2.459143364s ago: executing program 1 (id=47): bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x2, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000000b80)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000740)=[@rdma_dest={0x18, 0x114, 0x2, {0x7, 0xb64f}}], 0x18}, 0x0) 2.396695144s ago: executing program 4 (id=48): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r1, 0x4188aec6, &(0x7f0000006440)={0x0, [{0x0, 0x0, 0x10001, 0x0}, {0x2, 0x0, 0x6, 0x0}, {0x5, 0x0, 0x4, 0x0}, {0x3, 0x21, 0x8, 0x0}, {0x1, 0x0, 0x5, 0x0}, {0x0, 0x0, 0x0, 0x0}, {0x3, 0x0, 0x1a9973a0, 0x0}, {0x0, 0x0, 0x0, 0x0}, {0x7, 0x0, 0x5, 0x0}, {0x3, 0x0, 0xffff, 0x0}, {0x2, 0x0, 0x663bf355, 0x0}, {0x1, 0x0, 0xf, 0x0}, {0x3, 0x0, 0xbc74, 0x0}, {0xbdcfa268b0a4210a, 0x0, 0x81, 0x0}, {0x2, 0x0, 0x64, 0x0}, {0x3, 0x10, 0xf75, &(0x7f0000006340)="0896"}]}) 2.069627287s ago: executing program 1 (id=49): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum={0x2, 0x0, 0x0, 0xf}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28}, 0x20) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r4, 0x0, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000100007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182100", @ANYRES32=r5, @ANYBLOB="0000000002000000b70500000800000085000000a900000095"], &(0x7f0000000300)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x2b}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="18000000030000000000000026d0000095002b000000000093adff012255f674412d02000000880b5f04596a5e99fce658be2f200c699223886d8be4b50000005ab527ee3697f98125f30e6326996a3cfee33025a30b45bdcf2c69d105e5e55a1d273683623f1a5dc6e3c7e20eb7a98ecf3bd2cf898e924abe26ac296f660e69ba982fd76e00dcff7f0000ca6b78ad833488cfe4109eaf009eddcf21f5c63cde2f00150200000001000000520a0000151d010000000100bf00000000cc587424363da52001a3cdf2000000db74596fd72c002a60c1bc7dc8c38b7d2e13c50424b9dd1145d03ff45f70685c6bd9ff41c69b7de406e89dcbb7677e65a88a8407a9e7f9c0e91028b0856eb1ed9474480737a55ebb0bd701f7fb21135c6172eba7eb8a341f07e5a2d1e88b3cfc22df01e4bac9d97328fa2a82b5e8741e02056d93a433f50479387467824262852c7939db5672d07cdbe8e14abf56497e5d56dbe37551b870b2851c3f0a1a9ebfcba105a6ccdd01b0f04edb256c0200000073f6db43661bd7f0e2536ffbfe5ca31b4083145531458b7d1e341c6b351ebc5223f54d6bec93f4ef088e5d1be2515226988d664709ff03f1aa3dc7f1580ace9bf2afd28d0700000000000000d6eb372713255012e028cb2654d493a0b43bf21375709f348f5eda2967199cc936859a538100070000000000dc10e13ef227f627a40000ad1fa253d33fa74f172d3407ae4e1e347c0c6ef9dd2b6bb700000000000000000c586272c3f4d79bc36315745cb149f3cb385e6add14652003c7cdd3324f07d134d3a6c718bbd1aafe1140cff0be4c6f8df084c5e9734ae30aa9af030025f01ab03a9b1074407136bc506031f0916a39d3057d55183612b39e73ae8e6dc30356886a831836469e2051d937eb85f3f2d5ae2c1dca476b97419a3b76ed62409d004d7fbe362145d19605d760df4c5124ca325d374b371867a79b35c6617fc3327191fbf514573f0e30d1d60be2168fffc2f3dccd599a2cb77f124e22f87673675805494db821f39b50d938d5fd8c6b2a3a324c257bc9110971b749ccd74089ed6b86f81ca3ba47d8f71d290ed1b1a11f7a67125170c88c3b6a50692cc0064fc6bbd312536ac15016c85c6332226401b110da9c786eeca22debc99335587b54c13c3107008fa069af8223b38ced735c2d906551004d8dc10d88738488da01ffa4add56474573c964a270000f2f16625c0c10200000000c7a5ca60fdad159f2e44171f39638410020000004825d081f2d987f05c534187738655d7dc958f2046fa0c1619a6554b82d9c162eb61ca74f1ffdaccf0ea5f06e0fca8b27ff3983ab74fd3d560700a1fab44e77e312b3b129e000302d613916c9bcf9f0000fac73a5b6bfb27f88dba816020be760f7b45e001efada8000000000000fdaf4660402f7b3b79a433e08074ea2462974a00040000eb01352638f56dae0249d15ba8767259658878b7492cfbacde9b57cf4de00788adce638190f3570e0b4c80ef682df22201270955afb6008846557ee3bc09fda6dbb6550d597300eb82a184c96ffde5a30e5433e866665b98ca2002c804c22ff2634b7bfbf5c0d586cda5b45fd00dede1e88a4d41dee7cc76d7a23d06acb1d2d4c58faea84158bb440df2a694f4cdcaa4f65c22efffffffffffdd00000000d503d79986958115ae07b70f991430b7fb475d77b869ee02000000000000000000001ffff0ef89b2a68d2b05c995445d8a7700bcdfbec74fb2dd163e863315e84498dfb52bb93f6c9084659ce777ddac563c8596c2b1d8180289a61faa95a82bf1cfb7f2fd7252e9322abe282c33445d443a67467893b9bf0d1c8130ae6b226900000635376413c29f7c6f7b7e29b9a0c64e68328661f0c06e21f7d7dc22174ea4447a6f60edef3a4168d40200fbc71104512efe8e5d7d934aa289b4bd2b870000000000000000000007000000002000000000009b777883a02f0593dfc4cb4114b9f9cf4ad155110cc6ace2b322ac31bfa27847c799c8009a1ea5b98e525e6383ad7fd9795170e7b11e247603c2ff49a11459c7f606d729d3979676bffb3049166bb84a0f061991bd57c2566c10c282352aba05b6164ef876915a3f2491e4793e590dcc71de10da96366c1e992c0068c940dd4422c9882d3aa0f8a797b8fea6efcfb5276b7679f15559edaa977504cc0b2f777acb907ebf5fc14add71d0bca37405ded69b77ab4a3d7487fd04000000de17e1e13b93669b79556abb722d9c085b189b5fd1f30e8dc813f608830b110001732135e8e7262f290000923bfb6b41ff3792cee2fc37eee739c3e36a4bc80112968ec0d8902eced1fe552018014a463abbbf7ccd6a92a5734e3ebfca9b6e88e031f31de2183652e77c164c646a1cfd3710aa4205d8d4d4f974133ccb1e49feb42664eccd809c0ba8917eda87489e8946d5c8156197bcb66fd5606c63e3389ee9e8552381646365066ef9a36a449c96485c22ad1aa423b7b89efbc6cd54000bb0ea5f4f1e8773144fb6ac9a44d43593d77e66aa7ed7f3d4e7b211590c738888d02b2dbb0b2ba73ec72e1d8d7360a128499dd19e1e7b9b0671f4f58515b45ecb9964f3c4ddb8234391d514f8d996d8d6dd7f8fadfee2d7a0035638ce27c2936cb04b30a0eb0cde0000000000000040000000ec3c12ecee8fc3a40000000000000000e215b00ce2570b930723cbadb4033d1b8aaa2cfb3fb89e4a6e89737fd6232218a9e0c099d1eb59d60b3cca089785642f327139bc4394fb6d547a9b3c22599e780c1da7433fb47615d372e3fffe9703e37d5c87d513165278650738efcc04d27b766cf7f60066edd292f6c8a2174f391ed164bb1816819ceb3e378e776d422bc946cd9501accebeac3a5b31d8abc68ae537cd44a04e6bc21c35a7beab2610c51e593676bf635a20f597f4631b91454d182f826071f5210bd6d93173589929b23801e63c2266fde13b5a04b8d48be057c752bc415a756ea9b4d34156c4f73dd5e5924ef101a5fcdaf37c7ba2c4a9de9b000000000000000000000000000000a73b862e4b63c245616b522345587d0ee65a6902bdd0abd941e8aba37510b222ae544f395edd1b92ad53fc68f08ea00edc5e10d768836169dd296d56b306e8b75778c37571792a6c3d8b02ef378ebd59422cdd008bef6f80a80a68641ea5ed4f1126bb676098c10bf663eb3fb8c839364d28fd046dc64b35f9c3397ce6f4ad357b0000000000090000000088c7a8e2638f650a6f04a6f33a090f59414d6ebcbc687e66d600000000bd0a58ea6d36fc2cf9b9a71c137a2a22adb1006f371d4faf47285fd66fe0389afb96854bb360edcdf11b4ff6dd578bba93e949d240cde9b5836cb46032484dc19c93db7b6e5afa10547c78e76a3111557346e52566df196fd630561bb908fff4d2e19562aabd43742a26a43799f8636fa04ceb40c9e4ca1cfbbc7b949cd245a3ee118fd0d4f639444539af8766028d4ac4d4c548e290199e0dacbb4f6796b39bf32934d941ba2f88e3ebd0cf8e24f99eca86e4ca9b2cd2b54044a7fc4631572a6378a32df288785f146275c1f548e2a0c1016744e05f9de5044373d7650125027547eefe7b2d8c8871bb65395fae99d8456883705bfdfb00001854b2e5efa8aaf25827d659f592b1575281ec125de7fb91cd81d91dcb19f5cdf1e1e2b4a8a1389753a09110538689e38e07fb2dc72bd4fd11d7bc16aac5d85c6101bb722895248e463a5fb45ce0e564e90cb19d5993b471687ae4165e29cf2f58082115f5f8569896eedfd798733223e6d6584997510c374912ab798bd4af4654c01bb2c411bc36468ddd62b4eba5cfc8953526e0e5b1359797956152d0098ce47c62c3fe5a23219389622b7f65bf03527d25c3941b9cf1ffeedf6d99082bb57ea871c12213cc40900f83033bc18c529171fae324c315bc6ce358831d0230412212acfd5fc8d5cb0d028cf568e8bb40e27befe2ff01f7c6674a4d86d900633ea36641e0a781ea0ea7f2d928b8b22e2f97dd13348927375baea6863bef4acf4299096ada5cdd2a0eaafaa760a79d102d1e0c0000000000000000007926653b8d79ce16a432f124786a0bc3c5b7d196822492ae1ccf91aeac16406ad6f9cd3d96d57fceba8360ae49f73351814c9c2972f11064aaf3739d9100f9c0e4d0cb17d50c82e305ba7d62cf1cc6da26e34982a8c74dd8122cf5b5e7c34fd2712a0cef05e4d8ec7dd363219676bd9b19943185b132eb35a695e208dfa5cecdb1d6425c8879063c0f11bd64291a4209ee6dc1d9e9010013f6148c603e6a335e298efd6ab5cccc47a2c568c6afec54f8251bd840752addf200371361c9eedf05ed98585cf6d99e9e56055064bda2d373369761238c278147cd0eb7799f6b9c9fcaa3fd282154994f5b25420c86db9b6401e885de1c615a719a1c83e8fbbb181282dbaf3313a4e4a4877e9f37607e2cd6da0cf6371ec06a75f5a4206b2418ad8897ae149085d63f01f22eca44033234b3930b4d5da756669a1d59d69e7de54abf439988ed7ec33c2d0a901bb0985a24878984d8a4340fa9a356d100926fb5f2ef9976366a61b8cc2bcb1c072b0e9c564852388e1edff10d75b3832792e471cc15b40380f94d834243080158603fbc9134d6983c540525447478984611c0d9666941bfc0a30db47a8828b6e5c51aee2094599b4ce52795750e1764f1657ca8c5633c71287239dddf5c651496f7bbd148c937f083d2e4e0197dbc6ff0649c749707b17399b1d7efad23abb8b40b38704737e15662ae4913a4a001cd3b71c7af75b5ffad9780650c800a40ca80ddc41987919142fd28dbf22db5f4c435415a03455e1d55d1783ccef97d7e4655cf839d06f06e137bbe462a03b3100231914b19739dd57b4f12d026ad0c7fd3"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) r7 = socket$kcm(0x29, 0x2, 0x0) r8 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r8, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r8, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x96, 0x1, 0x1, 0xd59f80, 0x9, 0x6, 0x19ef, 0x3, 0x4, 0x27ff, 0x2800, 0x2, 0xbb6, 0x0, 0x1c, {0x80008, 0xff7ffbff}, 0xd0, 0x9}}) ioctl$VIDIOC_DBG_S_REGISTER(r8, 0x4038564f, &(0x7f00000002c0)={{0x0, @addr=0x7f}, 0x8, 0x7, 0x4}) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500), 0xc) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e0, &(0x7f0000000180)={r0, r6}) sendmmsg$inet(r7, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000400)="03362a24", 0x4}], 0x1}}], 0x1, 0x40) ioctl$sock_kcm_SIOCKCMUNATTACH(r7, 0x89e1, &(0x7f00000011c0)={r0}) 1.892881272s ago: executing program 2 (id=50): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f000000cbc0)=[{{&(0x7f0000000180)={0xa, 0x4e24, 0x7, @local, 0x3}, 0x1c, 0x0}}], 0x1, 0x4) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000000)={0x1, 0x5, 0x0, 0x2, 0x1, 0x27, 0x0, 0x7}, 0x20) 776.396358ms ago: executing program 1 (id=51): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) close(r0) socketpair$unix(0xa, 0x2, 0x11, &(0x7f00000002c0)) r1 = openat$ppp(0xffffffffffffff9c, 0x0, 0x101100, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x40047451, &(0x7f00000002c0)) 495.811519ms ago: executing program 1 (id=52): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) preadv(r2, &(0x7f0000000500)=[{0x0}, {&(0x7f0000000680)=""/180, 0x120}], 0x2, 0x6, 0x7) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0xa82, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f0000000900)={0x0, 0x1}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) getsockopt$bt_hci(r3, 0x11a, 0x2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/rtc/rtc0/wakealarm\x00', 0x80002, 0x13) write$cgroup_pid(r4, &(0x7f0000000380), 0x12) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f0000000980)={0x0, 0x1}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/netdevsim/devices/netdevsim10/sriov_numvfs\x00', 0x1, 0x0) write(r5, &(0x7f0000000600)='1', 0x1) r6 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/devices/system/cpu/cpu1/hotplug/target\x00', 0x1, 0x0) write(r6, &(0x7f0000000100)='0', 0x1) 406.37629ms ago: executing program 2 (id=53): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080) 291.853129ms ago: executing program 4 (id=54): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000002ec0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d02, 0xec000000, 0x7}]}) 0s ago: executing program 2 (id=55): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000001c0)="b9800000890f3235000400000f30440f20c03508000000440f22c036646665f36526f20f22a5430f01c50f01d1edc4a39979250b00000008b9800000c00f3235010000000f30f245ab48b800000000000000800f23c00f21f83500000b000f23f8c481e57dcd", 0x66}], 0x1, 0x10, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000000000000000000000000000000000000000000000000400", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00000000170000000400", "f4bd000000801900", [0x100000000, 0x8000000000000000]}}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.60' (ED25519) to the list of known hosts. [ 75.004374][ T5581] cgroup: Unknown subsys name 'net' [ 75.244931][ T5581] cgroup: Unknown subsys name 'cpuset' [ 75.301229][ T5581] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 76.917211][ T5581] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 80.924847][ T5595] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 80.934309][ T5595] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 80.945411][ T5595] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 80.946423][ T5595] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 80.951359][ T5595] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 80.952047][ T5595] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 80.961013][ T5599] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 80.961198][ T5599] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 80.964857][ T5599] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 80.964991][ T5599] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 81.065314][ T59] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 81.091602][ T59] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 81.099658][ T59] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 81.108680][ T59] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 81.113294][ T59] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 81.194183][ T5600] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 81.209100][ T5600] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 81.211462][ T5600] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 81.214660][ T5600] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 81.215457][ T5600] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 81.271124][ T5599] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 81.299863][ T5599] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 81.311167][ T5599] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 81.331838][ T5599] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 81.332557][ T5599] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 81.612145][ T10] cfg80211: failed to load regulatory.db [ 83.061663][ T4910] Bluetooth: hci0: command tx timeout [ 83.062007][ T5599] Bluetooth: hci1: command tx timeout [ 83.140840][ T4910] Bluetooth: hci3: command tx timeout [ 83.300843][ T4910] Bluetooth: hci2: command tx timeout [ 83.380881][ T4910] Bluetooth: hci4: command tx timeout [ 83.516410][ T5602] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.517263][ T5602] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.517449][ T5602] bridge_slave_0: entered allmulticast mode [ 83.519892][ T5602] bridge_slave_0: entered promiscuous mode [ 83.574894][ T5602] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.575043][ T5602] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.575189][ T5602] bridge_slave_1: entered allmulticast mode [ 83.577625][ T5602] bridge_slave_1: entered promiscuous mode [ 83.636379][ T5593] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.636591][ T5593] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.636736][ T5593] bridge_slave_0: entered allmulticast mode [ 83.639082][ T5593] bridge_slave_0: entered promiscuous mode [ 83.684153][ T5593] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.684380][ T5593] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.684850][ T5593] bridge_slave_1: entered allmulticast mode [ 83.687683][ T5593] bridge_slave_1: entered promiscuous mode [ 83.726909][ T5602] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.773980][ T5602] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.789797][ T5594] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.790678][ T5594] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.790951][ T5594] bridge_slave_0: entered allmulticast mode [ 83.793318][ T5594] bridge_slave_0: entered promiscuous mode [ 83.841773][ T5593] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.843221][ T5594] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.843423][ T5594] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.843877][ T5594] bridge_slave_1: entered allmulticast mode [ 83.846268][ T5594] bridge_slave_1: entered promiscuous mode [ 83.867145][ T5601] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.867285][ T5601] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.869572][ T5601] bridge_slave_0: entered allmulticast mode [ 83.872779][ T5601] bridge_slave_0: entered promiscuous mode [ 83.899354][ T5593] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.991487][ T5605] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.991636][ T5605] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.991791][ T5605] bridge_slave_0: entered allmulticast mode [ 83.994218][ T5605] bridge_slave_0: entered promiscuous mode [ 83.996704][ T5601] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.996829][ T5601] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.996965][ T5601] bridge_slave_1: entered allmulticast mode [ 84.001888][ T5601] bridge_slave_1: entered promiscuous mode [ 84.007969][ T5602] team0: Port device team_slave_0 added [ 84.049162][ T5605] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.049309][ T5605] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.049781][ T5605] bridge_slave_1: entered allmulticast mode [ 84.052805][ T5605] bridge_slave_1: entered promiscuous mode [ 84.075820][ T5602] team0: Port device team_slave_1 added [ 84.092278][ T5594] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.132956][ T5593] team0: Port device team_slave_0 added [ 84.137135][ T5594] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.155847][ T5601] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.174247][ T5593] team0: Port device team_slave_1 added [ 84.189772][ T5605] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.196275][ T5601] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.197609][ T5602] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.197622][ T5602] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.197651][ T5602] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.246012][ T5605] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.263462][ T5602] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.263510][ T5602] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.263534][ T5602] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.286887][ T5594] team0: Port device team_slave_0 added [ 84.329961][ T5593] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.330013][ T5593] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.330036][ T5593] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.335324][ T5594] team0: Port device team_slave_1 added [ 84.383787][ T5601] team0: Port device team_slave_0 added [ 84.394361][ T5593] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.394410][ T5593] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.394434][ T5593] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.418215][ T5605] team0: Port device team_slave_0 added [ 84.422597][ T5601] team0: Port device team_slave_1 added [ 84.442505][ T5605] team0: Port device team_slave_1 added [ 84.492405][ T5594] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.492455][ T5594] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.492478][ T5594] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.547435][ T5594] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.547488][ T5594] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.547512][ T5594] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.558889][ T5602] hsr_slave_0: entered promiscuous mode [ 84.563539][ T5602] hsr_slave_1: entered promiscuous mode [ 84.584463][ T5601] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.584476][ T5601] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.584499][ T5601] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.586933][ T5605] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.586945][ T5605] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.586968][ T5605] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.625996][ T5601] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.626009][ T5601] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.626033][ T5601] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.627444][ T5605] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.627455][ T5605] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.627478][ T5605] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.642918][ T5593] hsr_slave_0: entered promiscuous mode [ 84.644183][ T5593] hsr_slave_1: entered promiscuous mode [ 84.645149][ T5593] debugfs: 'hsr0' already exists in 'hsr' [ 84.645628][ T5593] Cannot create hsr debugfs directory [ 84.820112][ T5594] hsr_slave_0: entered promiscuous mode [ 84.821985][ T5594] hsr_slave_1: entered promiscuous mode [ 84.822858][ T5594] debugfs: 'hsr0' already exists in 'hsr' [ 84.822878][ T5594] Cannot create hsr debugfs directory [ 84.878162][ T5601] hsr_slave_0: entered promiscuous mode [ 84.879311][ T5601] hsr_slave_1: entered promiscuous mode [ 84.880183][ T5601] debugfs: 'hsr0' already exists in 'hsr' [ 84.880204][ T5601] Cannot create hsr debugfs directory [ 84.936672][ T5605] hsr_slave_0: entered promiscuous mode [ 84.937894][ T5605] hsr_slave_1: entered promiscuous mode [ 84.938788][ T5605] debugfs: 'hsr0' already exists in 'hsr' [ 84.938810][ T5605] Cannot create hsr debugfs directory [ 85.140876][ T4910] Bluetooth: hci1: command tx timeout [ 85.141091][ T5599] Bluetooth: hci0: command tx timeout [ 85.220998][ T4910] Bluetooth: hci3: command tx timeout [ 85.380911][ T4910] Bluetooth: hci2: command tx timeout [ 85.462750][ T4910] Bluetooth: hci4: command tx timeout [ 85.939019][ T5602] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 85.981706][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.988892][ T5602] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 86.013912][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.016399][ T5602] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 86.036927][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.056235][ T5602] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 86.093703][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.205263][ T5594] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 86.244726][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.254607][ T5594] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 86.283378][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.303990][ T5594] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 86.345455][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.369931][ T5594] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 86.414794][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.547669][ T5601] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 86.584415][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.595791][ T5601] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 86.626941][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.635698][ T5601] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 86.667218][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.689347][ T5601] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 86.723266][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.873445][ T5605] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 86.913410][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.928711][ T5605] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 86.957029][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.966227][ T5605] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 86.994092][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.028992][ T5605] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 87.054505][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 87.093530][ T5602] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.187723][ T5593] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 87.213442][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 87.221248][ T4910] Bluetooth: hci0: command tx timeout [ 87.223414][ T5593] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 87.231057][ T4910] Bluetooth: hci1: command tx timeout [ 87.263918][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 87.272633][ T5602] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.279015][ T5594] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.279361][ T5593] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 87.306340][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.311607][ T4910] Bluetooth: hci3: command tx timeout [ 87.315063][ T5593] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 87.344193][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 87.374096][ T706] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.374639][ T706] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.415739][ T706] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.415940][ T706] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.447024][ T5594] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.464635][ T4910] Bluetooth: hci2: command tx timeout [ 87.494996][ T1017] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.495199][ T1017] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.541487][ T4910] Bluetooth: hci4: command tx timeout [ 87.550380][ T1131] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.550500][ T1131] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.576044][ T5601] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.683215][ T5601] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.718730][ T1131] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.718911][ T1131] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.794402][ T1131] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.795071][ T1131] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.818399][ T5605] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.992702][ T5605] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.013177][ T5593] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.045421][ T1017] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.045684][ T1017] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.089362][ T1017] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.106741][ T1017] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.257147][ T5593] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.305891][ T2845] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.306167][ T2845] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.384715][ T1131] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.384938][ T1131] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.724155][ T5602] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.218473][ T5602] veth0_vlan: entered promiscuous mode [ 89.237536][ T5594] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.301108][ T4910] Bluetooth: hci1: command tx timeout [ 89.301169][ T5599] Bluetooth: hci0: command tx timeout [ 89.323111][ T5602] veth1_vlan: entered promiscuous mode [ 89.380698][ T5601] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.391645][ T4910] Bluetooth: hci3: command tx timeout [ 89.541135][ T4910] Bluetooth: hci2: command tx timeout [ 89.542766][ T5594] veth0_vlan: entered promiscuous mode [ 89.544409][ T5602] veth0_macvtap: entered promiscuous mode [ 89.568817][ T5602] veth1_macvtap: entered promiscuous mode [ 89.621047][ T4910] Bluetooth: hci4: command tx timeout [ 89.634743][ T5594] veth1_vlan: entered promiscuous mode [ 89.697946][ T5601] veth0_vlan: entered promiscuous mode [ 89.705806][ T5602] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.748808][ T5602] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.772843][ T5601] veth1_vlan: entered promiscuous mode [ 89.869323][ T5593] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.959556][ T5605] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.960234][ T5594] veth0_macvtap: entered promiscuous mode [ 90.039879][ T5594] veth1_macvtap: entered promiscuous mode [ 90.258183][ T5601] veth0_macvtap: entered promiscuous mode [ 90.277799][ T5594] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.323121][ T5601] veth1_macvtap: entered promiscuous mode [ 90.344126][ T5594] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.374858][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.375378][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.546381][ T5601] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.558938][ T2845] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.568431][ T5605] veth0_vlan: entered promiscuous mode [ 90.574565][ T2845] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.627090][ T5601] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.946779][ T5605] veth1_vlan: entered promiscuous mode [ 91.100619][ T5593] veth0_vlan: entered promiscuous mode [ 91.116321][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.122393][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.369810][ T5593] veth1_vlan: entered promiscuous mode [ 91.608707][ T2847] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.608784][ T2847] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.764868][ T5789] Bluetooth: MGMT ver 1.23 [ 91.875972][ T5605] veth0_macvtap: entered promiscuous mode [ 91.999552][ T1155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.001873][ T1155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.213571][ T5605] veth1_macvtap: entered promiscuous mode [ 93.092841][ T5593] veth0_macvtap: entered promiscuous mode [ 93.101558][ T2847] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.104492][ T5605] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.110938][ T2847] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.127397][ T5593] veth1_macvtap: entered promiscuous mode [ 93.140005][ T5605] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.210171][ T5801] FAULT_INJECTION: forcing a failure. [ 94.210171][ T5801] name failslab, interval 1, probability 0, space 0, times 1 [ 94.237019][ T5801] CPU: 0 UID: 0 PID: 5801 Comm: syz.1.9 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 94.237048][ T5801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 94.237067][ T5801] Call Trace: [ 94.237075][ T5801] [ 94.237084][ T5801] dump_stack_lvl+0xe8/0x150 [ 94.237128][ T5801] should_fail_ex+0x46b/0x600 [ 94.237155][ T5801] should_failslab+0xa8/0x100 [ 94.237184][ T5801] __kvmalloc_node_noprof+0x176/0x890 [ 94.237215][ T5801] ? newary+0x143/0xaf0 [ 94.237232][ T5801] ? newary+0x143/0xaf0 [ 94.237252][ T5801] newary+0x143/0xaf0 [ 94.237269][ T5801] ? ipcget+0x140/0xf30 [ 94.237297][ T5801] ipcget+0xac5/0xf30 [ 94.237322][ T5801] ? ipcget+0x140/0xf30 [ 94.237358][ T5801] ? __pfx_ipcget+0x10/0x10 [ 94.237384][ T5801] ? __se_sys_futex+0x3a8/0x450 [ 94.237410][ T5801] __x64_sys_semget+0x1aa/0x210 [ 94.237432][ T5801] ? __pfx___x64_sys_semget+0x10/0x10 [ 94.237462][ T5801] do_syscall_64+0x166/0x520 [ 94.237483][ T5801] ? trace_irq_disable+0x3b/0x140 [ 94.237505][ T5801] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.237526][ T5801] ? clear_bhb_loop+0x70/0xc0 [ 94.237551][ T5801] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.237571][ T5801] RIP: 0033:0x7fb19236e159 [ 94.237599][ T5801] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.237617][ T5801] RSP: 002b:00007fb1905c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000040 [ 94.237642][ T5801] RAX: ffffffffffffffda RBX: 00007fb1925f5fa0 RCX: 00007fb19236e159 [ 94.237656][ T5801] RDX: 0000000000000200 RSI: 0000000000000003 RDI: 00000000798e263a [ 94.237667][ T5801] RBP: 00007fb192405024 R08: 0000000000000000 R09: 0000000000000000 [ 94.237680][ T5801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 94.237693][ T5801] R13: 00007fb1925f6038 R14: 00007fb1925f5fa0 R15: 00007ffd01a15a68 [ 94.237723][ T5801] [ 94.479817][ T5593] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.574664][ T5593] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.857336][ T2845] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.867500][ T2845] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.900769][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 95.910771][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 95.920776][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 95.930766][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 95.940766][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 95.950765][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 95.960765][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 95.970763][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 95.980771][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 95.990790][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 98.018945][ T1017] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.022337][ T1017] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.023040][ T1017] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.402925][ T2846] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.882709][ T2861] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.406267][ T2846] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.407955][ T2846] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.503531][ T2846] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.519426][ T1131] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.287031][ T5831] 9p: Bad value for 'wfdno' [ 102.326433][ T5838] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 102.461947][ T5841] netlink: 8 bytes leftover after parsing attributes in process `syz.0.22'. [ 102.471231][ T5841] netlink: 20 bytes leftover after parsing attributes in process `syz.0.22'. [ 103.209274][ T5841] netlink: 8 bytes leftover after parsing attributes in process `syz.0.22'. [ 103.211831][ T706] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.232888][ T5841] netlink: 20 bytes leftover after parsing attributes in process `syz.0.22'. [ 103.340946][ T5841] Zero length message leads to an empty skb [ 103.363351][ T2847] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.372480][ T2847] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.226704][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.635818][ T57] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.724681][ T57] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.758475][ T1155] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.983479][ T2846] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.059352][ T2846] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.060401][ T1155] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.060577][ T1155] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.061005][ T1155] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.062667][ T1017] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.471538][ T5858] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5'. [ 106.293052][ T57] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.293145][ T57] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.293179][ T57] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.293225][ T57] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.933578][ T5880] mmap: syz.3.31 (5880) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 109.947990][ T5888] warning: `syz.4.34' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 110.227473][ T5890] syz_tun: entered allmulticast mode [ 110.866217][ T5882] syz_tun: left allmulticast mode [ 110.994536][ T5886] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 115.700630][ T5932] 9p: Bad value for 'wfdno' [ 118.552659][ T27] [ 118.555026][ T27] ====================================================== [ 118.562039][ T27] WARNING: possible circular locking dependency detected [ 118.569064][ T27] syzkaller #0 Not tainted [ 118.573468][ T27] ------------------------------------------------------ [ 118.580461][ T27] migration/1/27 is trying to acquire lock: [ 118.586326][ T27] ffff8880b8740998 (_T->lock){....}-{2:2}, at: rt_spin_trylock+0x56/0x2b0 [ 118.594824][ T27] [ 118.594824][ T27] but task is already holding lock: [ 118.602161][ T27] ffff88803a70aa40 (&p->pi_lock){-...}-{2:2}, at: __balance_push_cpu_stop+0x78/0x410 [ 118.611618][ T27] [ 118.611618][ T27] which lock already depends on the new lock. [ 118.611618][ T27] [ 118.622008][ T27] [ 118.622008][ T27] the existing dependency chain (in reverse order) is: [ 118.631013][ T27] [ 118.631013][ T27] -> #1 (&p->pi_lock){-...}-{2:2}: [ 118.638280][ T27] _raw_spin_lock+0x2e/0x40 [ 118.643286][ T27] rtlock_slowlock_locked+0x1ec/0x3c20 [ 118.649253][ T27] rt_spin_lock+0x165/0x400 [ 118.654260][ T27] finish_wait+0xbe/0x1e0 [ 118.659088][ T27] synchronize_rcu_expedited+0x63e/0x770 [ 118.665225][ T27] rcu_tasks_wait_gp+0x185/0xb90 [ 118.670665][ T27] rcu_tasks_one_gp+0xc4e/0xe30 [ 118.676015][ T27] rcu_tasks_kthread+0x19a/0x1c0 [ 118.681450][ T27] kthread+0x38b/0x470 [ 118.686017][ T27] ret_from_fork+0x514/0xb70 [ 118.691102][ T27] ret_from_fork_asm+0x1a/0x30 [ 118.696375][ T27] [ 118.696375][ T27] -> #0 (_T->lock){....}-{2:2}: [ 118.703383][ T27] __lock_acquire+0x15ff/0x2e40 [ 118.708732][ T27] lock_acquire+0x115/0x350 [ 118.713737][ T27] _raw_spin_lock_irqsave+0x40/0x60 [ 118.719443][ T27] rt_spin_trylock+0x56/0x2b0 [ 118.724619][ T27] __kfree_rcu_sheaf+0xd3/0x620 [ 118.729969][ T27] kvfree_call_rcu+0xa4/0x430 [ 118.735143][ T27] set_cpus_allowed_force+0x1bd/0x2a0 [ 118.741014][ T27] cpuset_cpus_allowed_fallback+0x24a/0x370 [ 118.747406][ T27] select_fallback_rq+0x11e/0x200 [ 118.752927][ T27] __balance_push_cpu_stop+0xa1/0x410 [ 118.758797][ T27] cpu_stopper_thread+0x25e/0x3f0 [ 118.764330][ T27] smpboot_thread_fn+0x565/0xa70 [ 118.769791][ T27] kthread+0x38b/0x470 [ 118.774364][ T27] ret_from_fork+0x514/0xb70 [ 118.779469][ T27] ret_from_fork_asm+0x1a/0x30 [ 118.784730][ T27] [ 118.784730][ T27] other info that might help us debug this: [ 118.784730][ T27] [ 118.794932][ T27] Possible unsafe locking scenario: [ 118.794932][ T27] [ 118.802357][ T27] CPU0 CPU1 [ 118.807698][ T27] ---- ---- [ 118.813037][ T27] lock(&p->pi_lock); [ 118.817095][ T27] lock(_T->lock); [ 118.823412][ T27] lock(&p->pi_lock); [ 118.829974][ T27] lock(_T->lock); [ 118.833757][ T27] [ 118.833757][ T27] *** DEADLOCK *** [ 118.833757][ T27] [ 118.841903][ T27] locks held by migration/1/27: 2, last CPU#1: [ 118.848030][ T27] #0: ffff88803a70aa40 (&p->pi_lock){-...}-{2:2}, at: __balance_push_cpu_stop+0x78/0x410 [ 118.857912][ T27] #1: ffffffff8e1c3ac0 (rcu_read_lock){....}-{1:3}, at: cpuset_cpus_allowed_fallback+0x22/0x370 [ 118.868410][ T27] [ 118.868410][ T27] stack backtrace: [ 118.874277][ T27] CPU: 1 UID: 0 PID: 27 Comm: migration/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 118.883964][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 118.894002][ T27] Stopper: __balance_push_cpu_stop+0x0/0x410 <- balance_push+0x28d/0x4f0 [ 118.902399][ T27] Call Trace: [ 118.905654][ T27] [ 118.908560][ T27] dump_stack_lvl+0xe8/0x150 [ 118.913135][ T27] print_circular_bug+0x2e2/0x300 [ 118.918166][ T27] check_noncircular+0x12f/0x150 [ 118.923089][ T27] __lock_acquire+0x15ff/0x2e40 [ 118.927916][ T27] ? __asan_memset+0x22/0x50 [ 118.932482][ T27] ? __enqueue_entity+0x30a/0xc60 [ 118.937494][ T27] lock_acquire+0x115/0x350 [ 118.941972][ T27] ? rt_spin_trylock+0x56/0x2b0 [ 118.946808][ T27] ? enqueue_task_fair+0x1560/0x1b60 [ 118.952085][ T27] _raw_spin_lock_irqsave+0x40/0x60 [ 118.957260][ T27] ? rt_spin_trylock+0x56/0x2b0 [ 118.962091][ T27] rt_spin_trylock+0x56/0x2b0 [ 118.966754][ T27] __kfree_rcu_sheaf+0xd3/0x620 [ 118.971591][ T27] kvfree_call_rcu+0xa4/0x430 [ 118.976247][ T27] ? do_raw_spin_unlock+0xf5/0x200 [ 118.981334][ T27] set_cpus_allowed_force+0x1bd/0x2a0 [ 118.986689][ T27] ? __pfx_set_cpus_allowed_force+0x10/0x10 [ 118.992566][ T27] ? cpuset_cpus_allowed_fallback+0x22/0x370 [ 118.998526][ T27] cpuset_cpus_allowed_fallback+0x24a/0x370 [ 119.004399][ T27] select_fallback_rq+0x11e/0x200 [ 119.009401][ T27] ? __pfx___balance_push_cpu_stop+0x10/0x10 [ 119.015360][ T27] __balance_push_cpu_stop+0xa1/0x410 [ 119.020713][ T27] ? _raw_spin_unlock_irq+0x23/0x50 [ 119.025903][ T27] ? __pfx___balance_push_cpu_stop+0x10/0x10 [ 119.031857][ T27] cpu_stopper_thread+0x25e/0x3f0 [ 119.036859][ T27] ? smpboot_thread_fn+0x4e/0xa70 [ 119.041860][ T27] smpboot_thread_fn+0x565/0xa70 [ 119.046777][ T27] ? smpboot_thread_fn+0x4e/0xa70 [ 119.051780][ T27] kthread+0x38b/0x470 [ 119.055823][ T27] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 119.061265][ T27] ? __pfx_kthread+0x10/0x10 [ 119.065850][ T27] ret_from_fork+0x514/0xb70 [ 119.070423][ T27] ? __pfx_ret_from_fork+0x10/0x10 [ 119.075513][ T27] ? __switch_to+0xc89/0x1420 [ 119.080168][ T27] ? __pfx_kthread+0x10/0x10 [ 119.084732][ T27] ret_from_fork_asm+0x1a/0x30 [ 119.089475][ T27] [ 119.130970][ T5960] loop5: detected capacity change from 0 to 7 [ 119.137528][ T5960] Dev loop5: unable to read RDB block 7 [ 119.137552][ T5960] loop5: unable to read partition table [ 119.137623][ T5960] loop5: partition table beyond EOD, truncated [ 119.137633][ T5960] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)