last executing test programs: 4.160673483s ago: executing program 2 (id=113): r0 = socket$kcm(0x10, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0xd6, 0xb6, 0x8d, 0x10, 0x5ac, 0x246, 0x27b1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x3, 0xfa, 0x10, 0x3f, "", [{{0x9, 0x4, 0x14, 0x4, 0x0, 0x3, 0x46, 0x2, 0x2}}]}}]}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000003f000107"], 0x18}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b9040212b0de0b000000000000a1180015000600142603600e120900210000000400a80016000400144006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe150d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e97", 0xd8}], 0x1}, 0x0) 2.898602422s ago: executing program 2 (id=134): r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f00000000c0)={@caif=@dgm={0x25, 0x1e9, 0x1}, {&(0x7f0000000000)=""/84, 0x54}, &(0x7f0000000080)}, 0xa0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil) getsockopt$inet_tcp_buf(r1, 0x6, 0x21, &(0x7f0000000180)=""/182, &(0x7f0000000240)=0xb6) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000280)={0x2, 'erspan0\x00', {0x7}, 0x6}) ioctl$XFS_IOC_FD_TO_HANDLE(r1, 0xc038586a, &(0x7f00000003c0)={r0, &(0x7f00000002c0)='\x00', 0x2, &(0x7f0000000300)={@align=0x3b7, {0x3, 0x3, 0x8, 0x7}}, 0x6, &(0x7f0000000340)={@_ha_fsid}, &(0x7f0000000380)=0xfff}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x10200, 0x2, 0x1, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) mmap$usbfs(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0x20010, r2, 0xfb8e) write$cgroup_freezer_state(r2, &(0x7f0000000440)='FREEZING\x00', 0x9) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r2, 0xffffffffffffffff}, &(0x7f0000000480), &(0x7f00000004c0)=r2}, 0x20) getsockname$packet(r2, &(0x7f0000000700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000780), 0x341082, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000880)={{r2, 0xffffffffffffffff}, &(0x7f0000000800), &(0x7f0000000840)='%pK \x00'}, 0x20) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x18, 0xc, &(0x7f0000000540)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x5}, @ldst={0x2, 0x0, 0x5, 0x7, 0x6, 0x20, 0xffffffffffffffff}, @ldst={0x2, 0x0, 0x4, 0x3, 0xa, 0xfffffffffffffff0}, @generic={0xf9, 0x4, 0x1, 0x9, 0xffffff80}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x40}, @generic={0x0, 0x6, 0x3, 0x7, 0x800}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_val={0x18, 0x5, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x80000000}], &(0x7f00000005c0)='GPL\x00', 0x7, 0xf5, &(0x7f0000000600)=""/245, 0x41000, 0x28, '\x00', r4, 0x0, r5, 0x8, &(0x7f00000007c0)={0xa, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000008c0)=[r2, r6, r2], &(0x7f0000000900)=[{0x2, 0x3, 0xe}, {0x2, 0x3, 0x5, 0x9}, {0x3, 0x5, 0x3, 0xa}], 0x10, 0x1}, 0x94) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r8) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0x10, &(0x7f0000000a40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@generic={0x2, 0x4, 0x4, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000ac0)='GPL\x00', 0x0, 0xc8, &(0x7f0000000b00)=""/200, 0x41100, 0x10, '\x00', r4, 0x0, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000c00)={0x3, 0x1, 0x8001, 0x9}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000c40)=[r2, 0xffffffffffffffff, r2, r3, r5, r3, r2, r5], &(0x7f0000000c80)=[{0x5, 0x2, 0xb, 0x2}, {0x4, 0x2, 0x9, 0x6}, {0x4, 0x3, 0xf, 0x3}]}, 0x94) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000dc0), r5) sendmsg$NL80211_CMD_AUTHENTICATE(r5, &(0x7f0000000e80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x20, r9, 0x10, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x20}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002040)=@bpf_ext={0x1c, 0x10, &(0x7f0000000ec0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xbb}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@generic={0x6, 0x3, 0x4, 0x9, 0xfffffffb}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000f40)='GPL\x00', 0x7, 0x1000, &(0x7f0000000f80)=""/4096, 0x41100, 0x18, '\x00', r4, 0x0, r5, 0x8, &(0x7f0000001f80)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000001fc0)={0x4, 0xd, 0x1, 0x2b}, 0x10, 0x24ab3, r7, 0x0, &(0x7f0000002000)=[r6, r3, r6], 0x0, 0x10, 0xfc3}, 0x94) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r5, &(0x7f00000021c0)={&(0x7f0000002100)={0x10, 0x0, 0x0, 0x20001}, 0xc, &(0x7f0000002180)={&(0x7f0000002140)={0x2c, r9, 0x10, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7d, 0x45}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x5b}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0xc010) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002240), r5) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002280)={'veth0_to_bond\x00', 0x0}) sendmsg$ETHTOOL_MSG_WOL_SET(r8, &(0x7f0000002700)={&(0x7f0000002200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000026c0)={&(0x7f00000022c0)={0x3c8, r10, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@ETHTOOL_A_WOL_SOPASS={0x4b, 0x3, "4f810faa73c216634db81fa9bbcdd36cde00d12434ddf48710d2e373f8768eb34759d9b97501de8f6b9b5f4894009ed8bac82b6c208caf570392327719a4fd54d664d08b7c531f"}, @ETHTOOL_A_WOL_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_WOL_SOPASS={0xe2, 0x3, "8fbc1f7a2de01aa76bf33bb6d84fca116ba8552f965b538a7ba0c69635adacf5bc3513c8e5b0c8cadec18fe29573e5834fe58012284972e0b1b7de215760d9cf69fbe9472eda0969de10d0ba140bcfa1d4e52314dde4640b6c3029d2f20c46f40807e4d338849e9dcc62d879384ffd46c4f615e2dc31c32b6de6f60cd74c62f3bffeae1843a3fbbe0f3c9e6eb3ea1eeb3fc3bb64a37f169b0b09ab8310b0003561d93ebd93453cac56c0d59ca45ededd2d518af37ac78374e9920a008f934accd153e2074d2671956fb694912b7b9257eef1f57f31c7475331dd39b28acb"}, @ETHTOOL_A_WOL_MODES={0x1c8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xff, 0x4, "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"}, @ETHTOOL_A_BITSET_MASK={0xc3, 0x5, "bde1e425938c4440e823a0d948ecaa9058332b58f3931a4c54fde07dc8bf7b9f7ccb465f849c74b7808a5f413e9de5bfa24f56898ec0d3bd39b1d1ca2ec71f83606f90ba61e219a4d5ed70bd18f4d4f06e107506133351d8e1963df4f43d05c85babcdfe70908151f958c6841ac33d6a166411126f862ff2864555c9c19a2fa474eeb230f103dcc6fb185c2d0e9a996ec0ef653e6b75ca2e5f7ec15779c2d4f34aca8f6afb377a15cd216f50b7b6fadd6ccbdcca7fec937260969db79f71f7"}]}, @ETHTOOL_A_WOL_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_WOL_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}]}, 0x3c8}, 0x1, 0x0, 0x0, 0x40014}, 0x44001) r12 = shmget$private(0x0, 0x4000, 0x1, &(0x7f0000ffc000/0x4000)=nil) shmat(r12, &(0x7f0000ffc000/0x4000)=nil, 0xc000) socket$inet_tcp(0x2, 0x1, 0x0) recvmsg$unix(r5, &(0x7f0000004a40)={&(0x7f0000002740), 0x6e, &(0x7f0000004980)=[{&(0x7f00000027c0)=""/87, 0x57}, {&(0x7f0000002840)=""/190, 0xbe}, {&(0x7f0000002900)=""/4096, 0x1000}, {&(0x7f0000003900)=""/4096, 0x1000}, {&(0x7f0000004900)=""/126, 0x7e}], 0x5, &(0x7f0000004a00)=[@cred={{0x1c}}], 0x20}, 0x40002060) 769.308153ms ago: executing program 2 (id=138): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_AUDOUT(r2, 0x40345632, &(0x7f00000000c0)={0x1, "b85c528abf9426fe9d7e513b65c5c22df4909fa6891ca94446b88c663d7c32f4", 0x1, 0x1}) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r1, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0xc3}, @IEEE802154_ATTR_BCN_ORD={0x5}, @IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0xfc}, @IEEE802154_ATTR_BAT_EXT={0x5, 0x1a, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) r3 = syz_io_uring_setup(0xf00, &(0x7f0000000640)={0x0, 0x5961, 0x10000, 0x2, 0x4e}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000280)=@IORING_OP_READ_MULTISHOT={0x31, 0x30, 0x0, @fd=r3, 0x80000000, 0x0, 0x0, 0x6, 0x1, {0x2, 0x0, 0x2b, '\x00', 0x0}}) io_uring_enter(r3, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x40, r10, 0x2, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040040}, 0x5) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x1c, r7, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x1c}, 0x1, 0x3000000}, 0x0) 702.912821ms ago: executing program 3 (id=140): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000040)=0x40, 0x4) setsockopt$inet6_int(r0, 0x29, 0x3a, &(0x7f0000000000)=0x9, 0x4) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000001}, 0x1c) r1 = socket$alg(0x26, 0x5, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000011008188040f46ec0800b9cca7480ef421000000e3bd6efb440013030e001b000d000008ba8000001201", 0x2e}], 0x1}, 0x4044) bind$alg(r1, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha512)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="3b2972c6172ae09b0b9c1d73974038e62b014a718b6cd59b3c3d31941f5f54fc1d0d60bfa2255120237288412b474b3347322c62942eb0535bad9d1c96f48c0a6790e72bf90415c181b376cd80e19b96d37966b786d23e06802c70ae3f906d873644ca7eda3cf65b7fde1700d0adc2318221165ecd5f5fbaf8bebdf3da138c27e1", 0x81) sendmmsg$inet6(r0, &(0x7f0000003380)=[{{0x0, 0x0, &(0x7f00000031c0)=[{&(0x7f0000002140)="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", 0x244}], 0x1}}], 0x1, 0x4000801) 702.695676ms ago: executing program 2 (id=141): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0xb00000000000000, &(0x7f0000000040)=@base={0x8, 0x4, 0x4, 0xbf22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4}, 0x50) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)={0x34, r1, 0x1, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BSS_BASIC_RATES={0x4}, @NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x34}, 0x1, 0x0, 0x0, 0x85}, 0x4c040) 702.292405ms ago: executing program 1 (id=142): r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000040)) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x400000, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r1, 0x800c5012, &(0x7f00000000c0)) r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000100), 0x6000, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000140)=0x6) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='gid_map\x00') ioctl$IOC_WATCH_QUEUE_SET_FILTER(r3, 0x5761, &(0x7f00000001c0)) ioctl$VFAT_IOCTL_READDIR_SHORT(r3, 0x82307202, &(0x7f0000000200)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000000440)={{0x1, 0x1, 0x18, r3, {0x3}}, './file0\x00'}) close(0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000480)={0x0, @in6={{0xa, 0x4e21, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, 0xe35e}}, 0x0, 0x9, 0x2, 0x760, 0x14, 0x1000, 0x6}, &(0x7f0000000540)=0x9c) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000580)={r5, 0x7f, 0xa, [0xfff, 0x5, 0xb, 0x7, 0xf28e, 0x1, 0xbe, 0x80, 0x5, 0x1]}, 0x1c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000680)={r3, 0x58, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$nl_route_sched(r4, &(0x7f0000000740)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)=@getchain={0x34, 0x66, 0x1, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x8, 0x9}, {0xffe0, 0xe}, {0x9, 0xd}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0xd99}]}, 0x34}, 0x1, 0x0, 0x0, 0x8040}, 0x40004880) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000780)={'dvmrp1\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x1, 0xffffff80, 0xfffffffe, 0x7, 0x40554, r4, 0x56, '\x00', r7, r4, 0x2, 0x1, 0x5}, 0x50) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000840)=0x6) getsockopt$XDP_MMAP_OFFSETS(r3, 0x11b, 0x1, &(0x7f0000000880), &(0x7f0000000900)=0x80) r8 = add_key$fscrypt_provisioning(&(0x7f0000000940), &(0x7f0000000980)={'syz', 0x0}, &(0x7f00000009c0)={0x0, 0x0, @b}, 0x48, 0xfffffffffffffffd) keyctl$KEYCTL_WATCH_KEY(0x20, r8, r4, 0xcb) r9 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000a40), 0x2, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r9, 0x8002f515, &(0x7f0000000a80)) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x1c, 0x2, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44040}, 0x8000) ioctl$KVM_CAP_X86_DISABLE_EXITS(r4, 0x4068aea3, &(0x7f0000000bc0)) ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0x4010942a, &(0x7f0000000c40)={0x1, 0xffffffffffffd5ad}) write$sndseq(r4, &(0x7f0000000c80)=[{0x1, 0x3, 0x7, 0x5, @time={0xffff, 0x1194}, {0x9, 0x2}, {0x5, 0x2}, @queue={0x7, {0x101, 0xb4}}}, {0x8, 0x9, 0xd, 0x2, @time={0x2, 0x8}, {0x3c}, {0x8, 0xa}, @queue={0x3, {0x1, 0x4}}}, {0x9, 0xe5, 0x0, 0x8, @tick=0x6, {0xc4, 0xfc}, {0x10, 0x3}, @queue={0x0, {0x7, 0x2}}}, {0x9, 0x3, 0x6, 0x8, @time={0x98b5, 0x6bb}, {0x6, 0xfb}, {0x80}, @time=@tick=0x5}, {0x1b, 0x3, 0x9, 0x9, @tick=0x80000000, {0xdd, 0x2}, {0x9, 0x2}, @addr={0x5f, 0x6}}, {0x7, 0x7f, 0x6, 0x1, @tick=0x5, {0x8, 0xf9}, {0x72, 0x40}, @raw32={[0x5, 0x9, 0x4]}}, {0x1, 0x9, 0xb, 0x1, @tick=0x9, {0x0, 0x4}, {0x4, 0x88}, @time=@time={0x2, 0x8000}}, {0x0, 0xc, 0x9, 0x3, @time={0x2, 0x81}, {0x8c, 0x2}, {0x4, 0x7}, @addr={0x7f, 0x3}}, {0x8, 0xf8, 0x3, 0x3, @tick=0x6, {0x0, 0x1}, {0x41}, @addr={0x3, 0x49}}, {0x6a, 0x6, 0xd, 0xff, @time={0x1, 0x5}, {0xa4, 0x8}, {0xff}, @connect={{0xf, 0x9}, {0x1b, 0xb2}}}], 0x118) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r4, 0xc0189372, &(0x7f0000000dc0)={{0x1, 0x1, 0x18, r2, {0x9}}, './file0\x00'}) close(r10) 608.543449ms ago: executing program 1 (id=143): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000002500), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r1, 0x6804, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0x9, @mcast2, 0x4}, 0x1c) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_complete={{}, {0x0, 0xc9, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x8}}}, 0x2) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000100)="6507060082762422f9a30250a90def79e5ddb933b83b8f8f1a0daad170478560f60eb8dc258ded60aee45b04b15db386", 0x30) r3 = accept$alg(r2, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000002940)=[{0x0, 0x0, &(0x7f00000013c0)=[{0x0}, {&(0x7f0000000340)="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", 0xc5d}], 0x2, 0x0, 0x0, 0x20004800}], 0x1, 0x24000800) recvmsg(r3, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000003f80)=""/4109, 0x100d}], 0x1}, 0x20f2) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_INFO(r4, 0x80e85411, &(0x7f0000000040)) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000080)={r6, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000000)={r6, 0x1, 0x6, @multicast}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) connect$netlink(r0, &(0x7f00000000c0)=@unspec, 0xc) write$selinux_load(0xffffffffffffffff, &(0x7f0000000200)={0xf97cff8c, 0x8, 'SE Linux', "5b03edacdd6b02115c84bcee95a17c9c4e7ae57d50fe456deb7b7b4cc815a591c4e7389276969bc566572053582f4d97e05cae2537ca1b55e54e51a9a9e7309ca4f5da30e5e5f664a8060d43660908cf5d1db79f9c81f63d569e1e991c3943d9be78c700bc9c114b5dd041899f7185c50cb9ee5944e1b550d7e6bc3073747a4c0a3e477ede"}, 0x95) syz_emit_ethernet(0x84, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6a000000004e110000000000000000000000ffffac1414bbff0200000000000000000000000000014e1d4e20"], 0x0) 608.317799ms ago: executing program 1 (id=144): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r1, 0xc008561c, &(0x7f0000000100)={0x9e0901, 0x3, @name="6c14f9104c575323652bb05c9764e27d0235e28510452c132c1eaa54d11e47a7"}) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv6_newaddr={0x17, 0x14, 0x9535393fea6295b5, 0x70bd2c, 0x25dfdbff, {0xa, 0x18}, [@IFA_LOCAL={0x14, 0x2, @loopback}, @IFA_FLAGS={0x8, 0x8, 0x595}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000001000000000000000000000000500000305000100"], 0x58}, 0x1, 0x0, 0x0, 0x8040}, 0x4004010) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x2012, r3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtaction={0x44, 0x30, 0xffff, 0x0, 0x0, {}, [{0x30, 0x1, [@m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x44}}, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) 608.095829ms ago: executing program 2 (id=145): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0xcd0}, 0x1, 0x0, 0x0, 0xfff5}, 0x0) 520.123829ms ago: executing program 2 (id=147): r0 = socket$nl_rdma(0x10, 0x3, 0x14) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) r1 = fsopen(&(0x7f0000000000)='bpf\x00', 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000092870000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="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"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x3a, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r4, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, 0x0, 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x3a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={0x1c, 0x26, 0x101, 0x70bd25, 0x25dfdbfb, {0x1}, [@typed={0x5, 0x167, 0x0, 0x0, @str='\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x24008080) r7 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x11, 0x0, 0x0) ioctl$KVM_TRANSLATE(r8, 0xc018ae85, &(0x7f0000000680)={0x80a0000, 0xdddd7000, 0x7f, 0x2, 0x9}) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000280)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x6, 0x5, 0x3, 0x4}) ioctl$DRM_IOCTL_MODE_CURSOR(r9, 0xc01c64a3, &(0x7f00000002c0)={0x1, r10, 0x3, 0x6, 0x21c2, 0xfffffff9, 0xfffffc00}) r11 = fsmount(r1, 0x0, 0x90) r12 = openat(r11, &(0x7f0000000080)='.\x00', 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r12}, 0x8) futex(&(0x7f000000cffc), 0x5, 0x300, 0x0, &(0x7f00000000c0), 0x5000000) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a3100000000080041007275650014007663616e3000000000000000000000006487dfd34f5b6064bef0ff9cea4d679d97dbf8812626d9ebc76fe19057acb9ecd609b925a88ba841cfb1414056ea1df898dfdab3d986a07a3d2244fdd53dcca6efa659c6a73d85"], 0x38}}, 0x0) 519.972836ms ago: executing program 1 (id=148): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000000100000040000180060001000a00000008000500000000000c000700000000000000000008000900000000000700060064680000080008000000000008000b0073"], 0x54}}, 0x0) times(&(0x7f0000000000)) 518.703942ms ago: executing program 3 (id=149): r0 = socket$inet_sctp(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)) sendmmsg$inet_sctp(r0, &(0x7f0000004900)=[{&(0x7f00000000c0)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000100)="f4", 0x1}], 0x1, &(0x7f0000000000)=[@init={0x18, 0x84, 0x0, {0x80, 0x10, 0x1, 0x9}}, @dstaddrv4={0x18, 0x84, 0x7, @loopback}], 0x30}], 0x1, 0x40) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r2, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20004000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r3, 0x0, 0x41, &(0x7f0000000540)=ANY=[], &(0x7f0000000000)=0x28) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f0000000040)={0x0, 0x8}, 0x8) 450.356905ms ago: executing program 1 (id=151): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) sendmsg$can_j1939(r0, &(0x7f00000001c0)={&(0x7f0000000340)={0x1d, 0x0, 0x0, {0x0, 0x1, 0x6}, 0xff}, 0x18, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={&(0x7f0000001580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELFLOWTABLE={0x1c, 0x18, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x6}]}], {0x14}}, 0x44}, 0x1, 0x0, 0x0, 0x4082}, 0x8000) 449.440323ms ago: executing program 3 (id=152): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x10985, 0x1, 0x3}, 0x18, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, './file0\x00'}, 0x6e) (async) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x4c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x8000, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x6, 0x6}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x1c, 0x2, [@TCA_GRED_LIMIT={0x8, 0x5, 0x2}, @TCA_GRED_DPS={0x10, 0x3, {0xa, 0x1, 0x0, 0x7}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x803}, 0x20004004) (async) landlock_restrict_self(r0, 0x1) connect$unix(r1, &(0x7f00000002c0)=@file={0x1, './file0\x00'}, 0x6e) (async) r5 = socket$kcm(0xa, 0x2, 0x0) close(r5) close(r5) r6 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x3, @remote, 0x1a, 0x3}, 0x80, 0x0}, 0x26004055) (async) r7 = syz_open_dev$video4linux(&(0x7f0000000000), 0x1ff, 0x1000) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r10, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r8], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r7, 0xc0305602, &(0x7f00000004c0)={0x0, 0x0, 0x3002, 0x1}) (async) setsockopt$sock_attach_bpf(r5, 0x0, 0x4, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 448.183617ms ago: executing program 1 (id=153): r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x800) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000340)={0x53, 0xfffffffe, 0x0, 0xaf, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1, 0x10, 0x3, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6b142, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000001040)={0xfc, {"a2e3ad09edfc09f91b44090987f70e06d038e7ff7fc6e5539b0d3d0e8b089b0732306c090890e0879b0a0ac6e70a9b3361959b4b9a240d5b0af3988f7ef319520100ffe8d178708c523c921b1b5b31070d074a0936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb000000002f17959d1f416e56c71b1931870262f5e8f7109242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d6ced5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed700129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc24202fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2b30900000000000900000000000000338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945d59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c23be434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb21fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1a44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f90000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000", 0x1000}}, 0xb6b) bind$can_j1939(r1, &(0x7f00000000c0)={0x1d, r2, 0x0, {}, 0xfe}, 0x18) connect$can_j1939(r1, &(0x7f0000000140)={0x1d, r2, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) sendmmsg(r1, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) sendmsg$sock(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000200)="1d558627b8e45349ea", 0x9}], 0x1}, 0x40000800) mount(&(0x7f0000000300)=@sg0, &(0x7f0000000380)='./bus\x00', &(0x7f0000000080)='ocfs2\x00', 0x0, &(0x7f0000000000)='usrquota') mkdir(0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x53564d41, 0x0, r6, 0x0, &(0x7f0000000180)) write$rfkill(r5, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 370.030015ms ago: executing program 3 (id=155): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0xcd0}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) 333.188145ms ago: executing program 3 (id=157): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x585d, 0xa004}, [@IFLA_IFNAME={0x14, 0x3, 'ipvlan0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x2}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x840}, 0x4000014) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x9, 0x5, 0x20ffd}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x12, r0, 0x100000000) 267.513989ms ago: executing program 0 (id=158): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$SIOCX25SENDCALLACCPT(r1, 0x89e9) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="68000000100037040000800000000f0000000000", @ANYRES32=r2, @ANYBLOB="c3040500000000004800128008000100677470003c000280050005"], 0x68}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) sendmmsg$inet(r0, &(0x7f0000000300)=[{{&(0x7f00000002c0)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @remote}}}], 0x20}}], 0x1, 0x40000) 171.625829ms ago: executing program 3 (id=159): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702000002ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x44, 0x32, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x30, 0x1, [@m_bpf={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x44}}, 0x0) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="01002bbd7000fedbdf25070000000a0004007770616e3000000008000100010000000800050000000000080003"], 0x40}}, 0x8084) r1 = openat$pmem0(0xffffffffffffff9c, &(0x7f00000009c0), 0x42800, 0x0) ioctl$BLKREPORTZONE(r1, 0xc0101282, &(0x7f0000001300)={0x7}) r2 = accept$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x14) r4 = socket(0x15, 0x5, 0x0) getsockopt(r4, 0x200000000114, 0x271f, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000200)={'ip6tnl0\x00', r3, 0x2f, 0x5, 0xf7, 0x1ff, 0x18, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x0, 0x10, 0x5, 0x6}}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r6, 0x4020aeb2, &(0x7f00000006c0)={0x0, 0x0, @ioapic={0x100010000, 0x101, 0x0, 0x2, 0x0, [{0x6, 0x6, 0x8, '\x00', 0xaf}, {0x2, 0x0, 0x2, '\x00', 0x5b}, {0x60, 0x4, 0x8, '\x00', 0x8}, {0x5, 0x6, 0x3, '\x00', 0xf1}, {0xfc, 0x0, 0x9, '\x00', 0x43}, {0x4, 0x79, 0xc5, '\x00', 0x5}, {0x94, 0x2, 0xb, '\x00', 0xfe}, {0xf, 0x0, 0x6}, {0x1, 0x4, 0x8, '\x00', 0x13}, {0x1, 0xf, 0x57, '\x00', 0x9}, {0x8, 0x4, 0x1, '\x00', 0x6}, {0x80, 0x6, 0x6, '\x00', 0x48}, {0x5, 0x3, 0x8, '\x00', 0xff}, {0x6, 0x3, 0xa3, '\x00', 0x2}, {0x7, 0x0, 0x4, '\x00', 0x6}, {0xd, 0x7, 0x7, '\x00', 0x86}, {0x8, 0x80, 0x80, '\x00', 0xb}, {0x3, 0x7, 0x81, '\x00', 0xb}, {0x78, 0x7, 0x2, '\x00', 0x7}, {0x3, 0x3, 0xb6, '\x00', 0x7}, {0x5, 0x8, 0x5, '\x00', 0x9}, {0x1, 0x9, 0x9, '\x00', 0x81}, {0xf9, 0xd, 0x81, '\x00', 0x81}, {0xfd, 0x3, 0x80, '\x00', 0x6}]}}) connect$packet(r2, &(0x7f00000001c0)={0x11, 0x11, r3, 0x1, 0x61, 0x6, @multicast}, 0x14) ioctl$BLKDISCARD(r1, 0x1277, &(0x7f00000003c0)) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="180100002000010000000000fcdbdf2506"], 0x118}], 0x1, 0x0, 0x0, 0x20008001}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000500)={[{0x2d, 'cpuset'}, {0x2b, 'net'}, {0x2b, 'hugetlb'}, {0x7b, 'cpuset'}, {0x2d, 'rlimit'}, {0x2d, 'net_prio'}, {0x0, 'hugetlb'}]}, 0x39) setsockopt$sock_linger(r7, 0x1, 0xd, &(0x7f0000000400)={0x0, 0x5}, 0x8) 130.67854ms ago: executing program 0 (id=160): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f0000000040)={0x3, [0x0, 0x0, 0x0]}) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x80000) ioctl$SNDRV_TIMER_IOCTL_CREATE(r1, 0xc02054a5, &(0x7f00000000c0)={0xfffffffffffff48d, r0, 'id0\x00'}) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r2) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={&(0x7f00000001c0)={0x254, r3, 0x300, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x5c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x10}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8d}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x10}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffffffff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffffd0b3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffffda}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_SOCK={0x64, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x51a}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffff613}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_BEARER={0x158, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'batadv0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x7, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x3}}, {0x14, 0x2, @in={0x2, 0x4e22, @local}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8}}, {0x14, 0x2, @in={0x2, 0x4e21, @private=0xa010102}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @remote}}, {0x14, 0x2, @in={0x2, 0x4e22, @remote}}}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xdd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x254}, 0x1, 0x0, 0x0, 0x4040005}, 0x20044010) ioctl$UBLK_U_CMD_GET_PARAMS(r2, 0x80207509, &(0x7f0000000540)={0x0, 0xffff, 0x70, &(0x7f00000004c0)={0x70}}) ioctl$SG_SCSI_RESET(r2, 0x2284, 0x0) connect$netlink(r2, &(0x7f00000005c0)=@kern={0x10, 0x0, 0x0, 0x8000}, 0xc) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000600)={{0xd000, 0x9000, 0xb, 0xff, 0xe7, 0x5b, 0xb, 0x7, 0x9, 0x8, 0x6, 0x86}, {0x80a0000, 0x0, 0x10, 0x6b, 0x3, 0x6, 0x7, 0x39, 0x6, 0x8, 0x7, 0x7}, {0x25000, 0x41000, 0x0, 0x1f, 0x4, 0x1, 0x2, 0x5, 0x85, 0x81, 0x2, 0xf8}, {0xdddd0000, 0xeeef0000, 0xd, 0x7, 0x60, 0x7, 0x5, 0x1, 0x6, 0xfc, 0x8, 0x2}, {0xe000, 0x41000, 0xa, 0x5, 0x13, 0x2, 0xf0, 0x8, 0xf, 0x0, 0x2, 0x3}, {0xb000, 0xb000, 0xc, 0x81, 0xc, 0x0, 0x4, 0x0, 0x7, 0x6, 0x2, 0x3}, {0x30000, 0xdddd0000, 0x1d, 0x84, 0x8, 0xf, 0x8, 0x1, 0x4c, 0xf6, 0x0, 0x40}, {0x3000, 0x8080000, 0xa, 0x1, 0x6, 0x7, 0x4, 0x8d, 0xb, 0x4, 0x2, 0x9}, {0x25000, 0x6}, {0xb000, 0x3ff}, 0x20000002, 0x0, 0x3000, 0x80, 0x9, 0x2500, 0x5000, [0xfffffffffffffbff, 0xffff, 0xfffffffffffffffb, 0x6]}) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000007c0)={{{@in6=@private2, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f00000008c0)=0xe8) mount$binder(0x0, &(0x7f0000000740)='./file0\x00', &(0x7f0000000780), 0x802000, &(0x7f0000000900)={[{@max={'max', 0x3d, 0x2}}], [{@fowner_lt={'fowner<', r4}}, {@fowner_lt={'fowner<', 0xee01}}, {@permit_directio}, {@pcr={'pcr', 0x3d, 0x3f}}, {@seclabel}]}) r5 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) r6 = getuid() quotactl_fd$Q_QUOTAON(r5, 0xffffffff80000201, r6, &(0x7f00000009c0)='./file0\x00') r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000a40), r2) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r7, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x1c, r8, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000000) r9 = syz_open_dev$sndpcmc(&(0x7f0000000b40), 0x4, 0x100) mmap$snddsp_status(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, 0x40010, r9, 0x82000000) ioctl$PPPIOCGFLAGS(r2, 0x8004745a, &(0x7f0000000b80)) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x80049367, &(0x7f0000000bc0)) ioctl$SG_GET_REQUEST_TABLE(r2, 0x2286, &(0x7f0000000c00)) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x33) write$selinux_load(r2, &(0x7f0000000d80)={0xf97cff8c, 0x8, 'SE Linux', "b929569acc24c27ff95f23f03bd1e1e479febf7e0e76a4b14b1ec3721a548d13938544d06132a6a04b776d6636428493890344c316e691840ae637d62eb27233e8242ec93fc070afc85cbcefe987d1a3ec8474aa160f74de0b8b3f5fc13b91b3eb3b2db4ae00ee861b46fa08600e70f50fbfad95205cfd0d464960c1b1eb6bec9d0e2c6f7f4866128a45bfc6f8076cbc305d168547e76384ad858ae53b1d0769cb6fc8e2162216a34fb38572bed62df9916dee480f2b02380a3a089b8caca8a30905ee7086"}, 0xd5) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl(r7, 0xc, &(0x7f0000000e80)="f3d6446939a8ad36b01e21b154fd77942cdcb3a6a6cc82da1acbe88911b3f131d626ab2ad60d7520200cf42aa1b6fca04d45d85bb6f1b6a1c8f14c367fb3eeb5a453889702cbb1cd6669") getsockopt$SO_COOKIE(r7, 0x1, 0x39, &(0x7f0000000f00), &(0x7f0000000f40)=0x8) ioctl$KVM_RUN(r2, 0xae80, 0x0) landlock_create_ruleset(&(0x7f0000000f80)={0x1101, 0xd3d77e518040aa57, 0x2, 0x1000, 0x5}, 0x30, 0x2) 97.496567ms ago: executing program 0 (id=161): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x24, @short={0x2, 0x2, 0xffff}}, 0x14, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x20002090}, 0x804) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000001480)=0xffffffffffff7fff, 0x8) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f0000000000)=0x100000001, 0x8) connect$vsock_stream(r0, &(0x7f0000001bc0)={0x28, 0x0, 0x2711, @hyper}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0) ioctl$HIDIOCSREPORT(r3, 0x400c4808, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f00000001c0)={0x2, 0x101, 0x1, {0x1, @vbi={0x1, 0xffff, 0x7f, 0x47504a4d, [0x8, 0x9], [0x1, 0x2], 0x1}}, 0x280000}) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x14, 0x27, 0x9, 0x70bd25, 0x25dfdbfd, {0x12}}, 0x14}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) 86.882761ms ago: executing program 0 (id=162): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x21, 0x34, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x10, 0x2, 0x0, 0xe7, {[@timestamp={0x8, 0xa, 0x5}]}}}}}}}, 0x0) r1 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r2, 0xc01064bd, &(0x7f0000000440)={&(0x7f00000000c0)='\x00', 0x1}) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r3, 0xc01064bd, &(0x7f0000000440)={&(0x7f0000000280)='\x00', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r2, 0xc00464be, &(0x7f0000000300)={r4}) ioctl$FE_GET_PROPERTY(r1, 0x80106f53, &(0x7f0000000000)={0x22, &(0x7f0000000140)=[{0x36, '\x00', @st={0x4, [{0x2, @uvalue=0xfff}, {0x0, @uvalue=0x1ff}, {0x3, @uvalue=0xfffffffffffffffb}, {0x0, @svalue=0x47b6cc5d}]}, 0x9}]}) r5 = syz_open_dev$dvb_frontend(&(0x7f0000000040), 0x12, 0x800) ioctl$FE_DISEQC_RECV_SLAVE_REPLY(r5, 0x800c6f40, &(0x7f00000000c0)={""/4, 0x4}) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000001, 0x80010, 0xffffffffffffffff, 0x9f74d000) 30.661776ms ago: executing program 0 (id=163): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f0000000040)=0xc) setreuid(r3, 0x0) syz_clone3(&(0x7f0000000380)={0x116980180, 0x0, 0x0, 0x0, {0x22}, 0x0, 0x0, 0x0, &(0x7f0000000000)=[0x0], 0x1}, 0x58) 0s ago: executing program 0 (id=164): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f00000001c0)='erofs\x00', 0x1000000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/self/make-it-fail\x00', 0x2, 0x0) (async) r1 = getpid() (async) r2 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r3 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n 1 [ 46.340004][ T5739] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 46.343652][ T5749] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 46.344695][ T5739] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 46.346447][ T5751] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 46.347063][ T5749] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 46.347564][ T5749] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 46.348032][ T5749] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 46.348558][ T5749] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 46.350769][ T5747] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 46.351352][ T5739] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 46.352001][ T5739] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 46.352738][ T5751] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 46.353093][ T5751] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 46.354063][ T5750] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 46.357025][ T42] audit: type=1400 audit(1785138850.155:163): avc: denied { read } for pid=5742 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 46.360149][ T5750] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 46.360908][ T5747] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 46.361291][ T5739] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 46.362698][ T42] audit: type=1400 audit(1785138850.155:164): avc: denied { open } for pid=5742 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 46.362730][ T42] audit: type=1400 audit(1785138850.155:165): avc: denied { mounton } for pid=5742 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 46.366470][ T42] audit: type=1400 audit(1785138850.165:166): avc: denied { module_request } for pid=5742 comm="syz-executor" kmod="netdev-nr1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 46.370490][ T5747] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 46.394573][ T42] audit: type=1400 audit(1785138850.195:167): avc: denied { sys_module } for pid=5742 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 46.405030][ T5747] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 46.928838][ T5736] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.931560][ T5736] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.936096][ T5736] bridge_slave_0: entered allmulticast mode [ 46.938996][ T5736] bridge_slave_0: entered promiscuous mode [ 46.942645][ T5736] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.944944][ T5736] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.947163][ T5736] bridge_slave_1: entered allmulticast mode [ 46.949738][ T5736] bridge_slave_1: entered promiscuous mode [ 46.952247][ T5746] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.957267][ T5746] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.959936][ T5746] bridge_slave_0: entered allmulticast mode [ 46.962743][ T5746] bridge_slave_0: entered promiscuous mode [ 46.965932][ T5746] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.968184][ T5746] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.970865][ T5746] bridge_slave_1: entered allmulticast mode [ 46.974595][ T5746] bridge_slave_1: entered promiscuous mode [ 47.026170][ T5736] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.030645][ T5736] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.066471][ T5735] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.068906][ T5735] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.071244][ T5735] bridge_slave_0: entered allmulticast mode [ 47.074017][ T5735] bridge_slave_0: entered promiscuous mode [ 47.085919][ T5746] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.097321][ T5735] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.100310][ T5735] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.102932][ T5735] bridge_slave_1: entered allmulticast mode [ 47.105782][ T5735] bridge_slave_1: entered promiscuous mode [ 47.113280][ T5746] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.117353][ T5736] team0: Port device team_slave_0 added [ 47.138318][ T5736] team0: Port device team_slave_1 added [ 47.155846][ T5735] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.195034][ T5735] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.204332][ T5746] team0: Port device team_slave_0 added [ 47.207535][ T5746] team0: Port device team_slave_1 added [ 47.209759][ T5736] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.212092][ T5736] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.221701][ T5736] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.226663][ T5736] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.228899][ T5736] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.236991][ T5736] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.240683][ T5742] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.243534][ T5742] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.245933][ T5742] bridge_slave_0: entered allmulticast mode [ 47.248666][ T5742] bridge_slave_0: entered promiscuous mode [ 47.251985][ T5742] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.254384][ T5742] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.256717][ T5742] bridge_slave_1: entered allmulticast mode [ 47.259370][ T5742] bridge_slave_1: entered promiscuous mode [ 47.293751][ T5735] team0: Port device team_slave_0 added [ 47.297179][ T5735] team0: Port device team_slave_1 added [ 47.299328][ T5746] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.301608][ T5746] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.309888][ T5746] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.326928][ T5742] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.335386][ T5746] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.337556][ T5746] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.345406][ T5746] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.357517][ T5742] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.377136][ T5735] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.379820][ T5735] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.389836][ T5735] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.407629][ T5736] hsr_slave_0: entered promiscuous mode [ 47.410428][ T5736] hsr_slave_1: entered promiscuous mode [ 47.414604][ T5735] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.417310][ T5735] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.427189][ T5735] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.433229][ T5742] team0: Port device team_slave_0 added [ 47.456664][ T5742] team0: Port device team_slave_1 added [ 47.467658][ T5746] hsr_slave_0: entered promiscuous mode [ 47.470360][ T5746] hsr_slave_1: entered promiscuous mode [ 47.472570][ T5746] debugfs: 'hsr0' already exists in 'hsr' [ 47.474480][ T5746] Cannot create hsr debugfs directory [ 47.528916][ T5742] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.531058][ T5742] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.538765][ T5742] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.545825][ T5742] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.547924][ T5742] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.555579][ T5742] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.592039][ T5735] hsr_slave_0: entered promiscuous mode [ 47.594437][ T5735] hsr_slave_1: entered promiscuous mode [ 47.596713][ T5735] debugfs: 'hsr0' already exists in 'hsr' [ 47.598572][ T5735] Cannot create hsr debugfs directory [ 47.667763][ T5742] hsr_slave_0: entered promiscuous mode [ 47.670089][ T5742] hsr_slave_1: entered promiscuous mode [ 47.672215][ T5742] debugfs: 'hsr0' already exists in 'hsr' [ 47.674187][ T5742] Cannot create hsr debugfs directory [ 47.842472][ T5736] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 47.853589][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 47.861278][ T5736] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 47.866905][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 47.873131][ T5736] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 47.877820][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 47.881342][ T5736] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 47.886259][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 47.937798][ T5746] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 47.941564][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 47.945046][ T5746] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 47.948856][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 47.951900][ T5746] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 47.955544][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 47.958132][ T5746] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 47.962632][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.017967][ T5735] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 48.022830][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.025869][ T5735] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 48.029729][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.032207][ T5735] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 48.036698][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.039736][ T5735] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 48.043802][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.107993][ T5742] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 48.112076][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.115164][ T5742] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 48.118707][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.121381][ T5742] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 48.125385][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.131600][ T5742] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 48.135385][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.141407][ T5736] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.166619][ T5746] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.184871][ T5736] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.189236][ T5746] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.199984][ T1175] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.202480][ T1175] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.206751][ T1175] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.208956][ T1175] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.225455][ T1175] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.227665][ T1175] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.231581][ T1175] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.233900][ T1175] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.270765][ T5735] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.295920][ T5742] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.311265][ T5735] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.321561][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.323859][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.329862][ T5742] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.333435][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.335711][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.343207][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.345453][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.350509][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.352780][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.404888][ T64] Bluetooth: hci0: command tx timeout [ 48.405220][ T5747] Bluetooth: hci3: command tx timeout [ 48.405253][ T5743] Bluetooth: hci2: command tx timeout [ 48.415686][ T5742] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 48.496890][ T5747] Bluetooth: hci1: command tx timeout [ 48.502485][ T5746] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.536955][ T5746] veth0_vlan: entered promiscuous mode [ 48.547943][ T5736] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.551726][ T5746] veth1_vlan: entered promiscuous mode [ 48.576278][ T5746] veth0_macvtap: entered promiscuous mode [ 48.585545][ T5746] veth1_macvtap: entered promiscuous mode [ 48.596594][ T5736] veth0_vlan: entered promiscuous mode [ 48.599886][ T5735] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.611238][ T5746] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.619007][ T5746] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.622131][ T5736] veth1_vlan: entered promiscuous mode [ 48.637504][ T5742] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.648723][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.653987][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.660291][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.663650][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.696116][ T5735] veth0_vlan: entered promiscuous mode [ 48.703438][ T5736] veth0_macvtap: entered promiscuous mode [ 48.721913][ T5735] veth1_vlan: entered promiscuous mode [ 48.735900][ T5736] veth1_macvtap: entered promiscuous mode [ 48.764771][ T5742] veth0_vlan: entered promiscuous mode [ 48.765155][ T1175] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.769783][ T1175] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.787790][ T5736] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.797018][ T5742] veth1_vlan: entered promiscuous mode [ 48.805597][ T1175] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.806290][ T5735] veth0_macvtap: entered promiscuous mode [ 48.808664][ T1175] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.812001][ T5736] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.820521][ T5735] veth1_macvtap: entered promiscuous mode [ 48.828134][ T5845] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.831092][ T5845] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.838333][ T5845] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.842100][ T5845] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.857491][ T5746] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 48.860070][ T5735] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.872256][ T5735] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.887935][ T5845] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.892070][ T5742] veth0_macvtap: entered promiscuous mode [ 48.900824][ T5845] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.905024][ T5845] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.911358][ T5742] veth1_macvtap: entered promiscuous mode [ 48.920027][ T5845] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.936233][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.940285][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.946037][ T5742] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.959217][ T5742] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.991750][ T5845] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.996430][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.998979][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.003123][ T5845] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.008404][ T5845] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.015553][ T5845] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.020613][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.026622][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.068112][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.071012][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.096196][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.103274][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.121629][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.129283][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.215815][ T5899] binder: 5898:5899 ioctl c0306201 200000000080 returned -14 [ 49.220146][ T5899] binder: 5898:5899 ioctl c0306201 2000000003c0 returned -14 [ 49.258043][ T5903] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2'. [ 49.350748][ T5921] kvm: user requested TSC rate below hardware speed [ 49.733795][ T5967] kvm: user requested TSC rate below hardware speed [ 49.754588][ T5966] kvm: user requested TSC rate below hardware speed [ 49.902030][ T5999] netlink: 'syz.1.43': attribute type 1 has an invalid length. [ 49.922539][ T5992] Bluetooth: MGMT ver 1.23 [ 50.011426][ T6011] program syz.1.47 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 50.125644][ T61] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 50.253973][ T61] usb 5-1: device descriptor read/64, error -71 [ 50.284144][ T6028] Mount JFS Failure: -22 [ 50.286442][ T6028] jfs_mount failed w/return code = -22 [ 50.447461][ T6039] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(143) [ 50.449642][ T6039] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 50.453184][ T6039] vhci_hcd vhci_hcd.0: Device attached [ 50.456427][ T6040] vhci_hcd: cannot find the pending unlink 6 [ 50.484167][ T5747] Bluetooth: hci2: command tx timeout [ 50.485102][ T5743] Bluetooth: hci0: command tx timeout [ 50.488122][ T64] Bluetooth: hci3: command tx timeout [ 50.504117][ T61] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 50.574025][ T5743] Bluetooth: hci1: command tx timeout [ 50.624001][ T5843] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 50.634336][ T61] usb 5-1: device descriptor read/64, error -71 [ 50.694057][ T5843] usb 39-1: new full-speed USB device number 2 using vhci_hcd [ 50.744372][ T61] usb usb5-port1: attempt power cycle [ 50.877459][ T6053] kvm: apic: phys broadcast and lowest prio [ 51.081788][ T6060] openvswitch: netlink: Multiple metadata blocks provided [ 51.085463][ T61] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 51.115178][ T61] usb 5-1: device descriptor read/8, error -71 [ 51.128611][ T42] kauditd_printk_skb: 79 callbacks suppressed [ 51.128625][ T42] audit: type=1400 audit(1785138854.925:247): avc: denied { create } for pid=6061 comm="syz.2.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 51.132555][ T6062] syzkaller0: entered promiscuous mode [ 51.138376][ T42] audit: type=1400 audit(1785138854.925:248): avc: denied { create } for pid=6061 comm="syz.2.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 51.138414][ T42] audit: type=1400 audit(1785138854.925:249): avc: denied { setopt } for pid=6061 comm="syz.2.61" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 51.140583][ T6062] syzkaller0: entered allmulticast mode [ 51.161442][ T42] audit: type=1400 audit(1785138854.955:250): avc: denied { write } for pid=6061 comm="syz.2.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 51.365846][ T61] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 51.385959][ T61] usb 5-1: device descriptor read/8, error -71 [ 51.421516][ T42] audit: type=1400 audit(1785138855.215:251): avc: denied { create } for pid=6063 comm="syz.3.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 51.429310][ T42] audit: type=1400 audit(1785138855.215:252): avc: denied { create } for pid=6063 comm="syz.3.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 51.437491][ T42] audit: type=1400 audit(1785138855.215:253): avc: denied { write } for pid=6063 comm="syz.3.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 51.504136][ T61] usb usb5-port1: unable to enumerate USB device [ 51.529339][ T42] audit: type=1400 audit(1785138855.325:254): avc: denied { create } for pid=6063 comm="syz.3.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 51.615145][ T6040] vhci_hcd: connection reset by peer [ 51.618827][ T13] vhci_hcd vhci_hcd.1: stop threads [ 51.621356][ T13] vhci_hcd vhci_hcd.1: release socket [ 51.629609][ T13] vhci_hcd vhci_hcd.1: disconnect device [ 52.183069][ T42] audit: type=1400 audit(1785138855.975:255): avc: denied { create } for pid=6073 comm="syz.2.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 52.195637][ T42] audit: type=1400 audit(1785138855.975:256): avc: denied { bind } for pid=6073 comm="syz.2.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 52.242209][ T6076] macvtap0: mtu less than device minimum [ 52.448789][ T6081] capability: warning: `syz.2.67' uses deprecated v2 capabilities in a way that may be insecure [ 52.511923][ T6085] netlink: 'syz.2.68': attribute type 1 has an invalid length. [ 52.514560][ T6085] netlink: 756 bytes leftover after parsing attributes in process `syz.2.68'. [ 52.518912][ T6064] Set syz1 is full, maxelem 65536 reached [ 52.565321][ T5743] Bluetooth: hci0: command tx timeout [ 52.565520][ T64] Bluetooth: hci3: command tx timeout [ 52.568429][ T5747] Bluetooth: hci2: command tx timeout [ 52.639310][ T6083] ALSA: mixer_oss: invalid OSS volume ';Ê' [ 52.645958][ T5747] Bluetooth: hci1: command tx timeout [ 52.891008][ T6108] xt_hashlimit: size too large, truncated to 1048576 [ 53.077514][ T6126] 9p: Bad value for 'cachetag' [ 53.081097][ T6126] /dev/sg0: Can't lookup blockdev [ 53.110847][ T6128] netlink: 60 bytes leftover after parsing attributes in process `syz.0.80'. [ 53.456144][ T6134] ======================================================= [ 53.456144][ T6134] WARNING: The mand mount option has been deprecated and [ 53.456144][ T6134] and is ignored by this kernel. Remove the mand [ 53.456144][ T6134] option from the mount to silence this warning. [ 53.456144][ T6134] ======================================================= [ 53.467452][ T6134] overlay: ./file0 is not a directory [ 53.512110][ T6138] openvswitch: netlink: Geneve option length err (len 856, max 255). [ 53.596175][ T6150] netlink: 60 bytes leftover after parsing attributes in process `syz.1.89'. [ 53.642878][ T6156] netlink: 20 bytes leftover after parsing attributes in process `syz.2.88'. [ 53.643379][ T6151] netlink: 'syz.0.87': attribute type 1 has an invalid length. [ 53.650170][ T6151] netlink: 'syz.0.87': attribute type 12 has an invalid length. [ 53.652649][ T6151] netlink: 224 bytes leftover after parsing attributes in process `syz.0.87'. [ 53.685142][ T6156] netlink: 12 bytes leftover after parsing attributes in process `syz.2.88'. [ 53.749381][ T6169] netlink: 24 bytes leftover after parsing attributes in process `syz.1.93'. [ 53.779630][ T6169] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6169 comm=syz.1.93 [ 54.003343][ T6182] syz.1.97 uses obsolete (PF_INET,SOCK_PACKET) [ 54.075608][ T6185] ALSA: seq fatal error: cannot create timer (-19) [ 54.114859][ T6188] netlink: 60 bytes leftover after parsing attributes in process `syz.1.98'. [ 54.201489][ T6192] Zero length message leads to an empty skb [ 54.223048][ T6191] lo: entered promiscuous mode [ 54.225909][ T6191] bond0: entered promiscuous mode [ 54.228020][ T6191] dummy0: entered promiscuous mode [ 54.230602][ T6191] eql: entered promiscuous mode [ 54.232934][ T6191] ifb0: entered promiscuous mode [ 54.236012][ T6191] ifb1: entered promiscuous mode [ 54.338185][ T6191] e1000 0000:00:06.0 eth0: entered promiscuous mode [ 54.356474][ T5823] e1000 0000:00:06.0 eth0: Reset adapter [ 54.385274][ T6197] netlink: 'syz.1.100': attribute type 2 has an invalid length. [ 54.614530][ T5823] e1000 0000:00:06.0 eth0: Reset adapter [ 54.655138][ T5747] Bluetooth: hci0: command tx timeout [ 54.655160][ T64] Bluetooth: hci2: command tx timeout [ 54.656329][ T5743] Bluetooth: hci3: command tx timeout [ 54.656693][ T6229] netlink: 60 bytes leftover after parsing attributes in process `syz.3.107'. [ 54.670439][ T6230] Mass Storage Function, version: 2009/09/11 [ 54.672400][ T6227] xt_CT: You must specify a L4 protocol and not use inversions on it [ 54.674293][ T6230] LUN: removable file: (no medium) [ 54.679247][ T6230] mass_storage.usb0/lun.0: unable to open backing file: fi [ 54.724429][ T64] Bluetooth: hci1: command tx timeout [ 54.844568][ T5823] e1000 0000:00:06.0 eth0: Reset adapter [ 55.064762][ T5823] e1000 0000:00:06.0 eth0: Reset adapter [ 55.834360][ T5843] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 57.300032][ T5823] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 60.593960][ T42] kauditd_printk_skb: 135 callbacks suppressed [ 60.593976][ T42] audit: type=1400 audit(1785138864.385:392): avc: denied { write } for pid=6251 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 60.662431][ T42] audit: type=1400 audit(1785138864.455:393): avc: denied { write } for pid=6254 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 63.392940][ T42] audit: type=1400 audit(1785138867.185:394): avc: denied { write } for pid=6256 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 63.467738][ T42] audit: type=1400 audit(1785138867.265:395): avc: denied { write } for pid=6259 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 67.967037][ T42] audit: type=1400 audit(1785138871.765:396): avc: denied { create } for pid=6262 comm="syz.0.108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 67.979968][ T42] audit: type=1400 audit(1785138871.775:397): avc: denied { read } for pid=6262 comm="syz.0.108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 67.988090][ T42] audit: type=1400 audit(1785138871.775:398): avc: denied { bind } for pid=6265 comm="syz.2.110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 67.996193][ T42] audit: type=1400 audit(1785138871.775:399): avc: denied { name_bind } for pid=6265 comm="syz.2.110" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 68.011070][ T42] audit: type=1400 audit(1785138871.775:400): avc: denied { node_bind } for pid=6265 comm="syz.2.110" saddr=224.0.0.2 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 68.023423][ T42] audit: type=1400 audit(1785138871.815:401): avc: denied { read } for pid=6271 comm="syz.3.111" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 68.034605][ T42] audit: type=1400 audit(1785138871.815:402): avc: denied { open } for pid=6271 comm="syz.3.111" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 68.058407][ T42] audit: type=1400 audit(1785138871.855:403): avc: denied { ioctl } for pid=6275 comm="syz.2.112" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=11141 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 68.065678][ T6277] binder: BC_ATTEMPT_ACQUIRE not supported [ 68.068466][ T42] audit: type=1400 audit(1785138871.865:404): avc: denied { getopt } for pid=6275 comm="syz.2.112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 68.070059][ T6277] binder: 6275:6277 ioctl c0306201 200000000000 returned -22 [ 68.078645][ T42] audit: type=1400 audit(1785138871.865:405): avc: denied { ioctl } for pid=6275 comm="syz.2.112" path="socket:[12183]" dev="sockfs" ino=12183 ioctlcmd=0x940c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 68.095180][ T6272] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 68.098152][ T6272] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 68.105972][ T6272] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 68.116572][ T6272] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 68.118893][ T6272] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 68.123716][ T6272] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 68.128105][ T6272] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 68.130748][ T6272] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 68.135103][ T6272] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 68.138615][ T6272] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 68.140605][ T6272] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 68.145272][ T6272] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 68.285115][ T6296] netlink: 60 bytes leftover after parsing attributes in process `syz.1.116'. [ 68.413908][ T61] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 68.427898][ T6300] netlink: 8 bytes leftover after parsing attributes in process `syz.0.117'. [ 68.573910][ T61] usb 7-1: Using ep0 maxpacket: 16 [ 68.578810][ T61] usb 7-1: config 3 has an invalid interface number: 20 but max is 0 [ 68.582222][ T61] usb 7-1: config 3 has no interface number 0 [ 68.585076][ T61] usb 7-1: config 3 interface 20 has no altsetting 0 [ 68.591390][ T61] usb 7-1: New USB device found, idVendor=05ac, idProduct=0246, bcdDevice=27.b1 [ 68.595793][ T61] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.599117][ T61] usb 7-1: Product: syz [ 68.600879][ T61] usb 7-1: Manufacturer: syz [ 68.602828][ T61] usb 7-1: SerialNumber: syz [ 68.700403][ T6319] netlink: 'syz.0.122': attribute type 3 has an invalid length. [ 68.822093][ T6283] netlink: 'syz.2.113': attribute type 33 has an invalid length. [ 68.825332][ T6283] netlink: 152 bytes leftover after parsing attributes in process `syz.2.113'. [ 68.837170][ T61] input: bcm5974 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:3.20/input/input5 [ 68.845797][ T5132] bcm5974 7-1:3.20: could not read from device [ 68.852468][ T5132] bcm5974 7-1:3.20: could not read from device [ 68.858978][ T5132] bcm5974 7-1:3.20: could not read from device [ 68.859224][ T61] usb 7-1: USB disconnect, device number 2 [ 68.961883][ T6334] netlink: 60 bytes leftover after parsing attributes in process `syz.0.127'. [ 69.168999][ T6344] tmpfs: Bad value for 'mpol' [ 69.224693][ T6346] Invalid logical block size (150) [ 69.279269][ T6348] comedi comedi3: unsupported base address 0x2000 [ 69.319221][ T6350] xt_CONNSECMARK: invalid mode: 0 [ 69.334254][ T5843] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 69.500654][ T5843] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 69.504980][ T5843] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 69.508618][ T5843] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 69.512022][ T5843] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 69.516676][ T5843] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 69.519855][ T5843] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.544967][ T6358] netlink: 60 bytes leftover after parsing attributes in process `syz.0.136'. [ 69.546565][ T5843] usb 8-1: config 0 descriptor?? [ 69.584459][ T6360] faux_driver vgem: [drm] Unknown color mode 135165; guessing buffer size. [ 70.025397][ T6364] syz.3.129 (6364): drop_caches: 0 [ 70.164128][ T5747] Bluetooth: hci2: command 0x0c1a tx timeout [ 70.164211][ T5097] Bluetooth: hci0: command 0x0c1a tx timeout [ 70.164915][ T64] Bluetooth: hci3: command 0x0c1a tx timeout [ 70.165666][ T5743] Bluetooth: hci1: command 0x0c1a tx timeout [ 71.019234][ T5843] usbhid 8-1:0.0: can't add hid device: -71 [ 71.021825][ T5843] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 71.037221][ T5843] usb 8-1: USB disconnect, device number 2 [ 71.126670][ T1445] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.130489][ T1445] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.473640][ T6309] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 71.598381][ T6379] netlink: 'syz.3.140': attribute type 27 has an invalid length. [ 71.622878][ T6379] bond0: (slave bond_slave_1): Releasing backup interface [ 71.662118][ T5097] Bluetooth: hci2: Malformed HCI Event [ 71.665925][ T6392] batadv_slave_1: entered promiscuous mode [ 71.668437][ T6391] batadv_slave_1: left promiscuous mode [ 71.718991][ T6396] netlink: 60 bytes leftover after parsing attributes in process `syz.2.145'. [ 71.732247][ T6398] netlink: 'syz.1.144': attribute type 1 has an invalid length. [ 71.791883][ T6404] IPVS: persistence engine module ip_vs_pe_s not found [ 71.823020][ T6411] netlink: 'syz.0.150': attribute type 1 has an invalid length. [ 71.867889][ T6411] bond1: entered promiscuous mode [ 71.874696][ T6411] 8021q: adding VLAN 0 to HW filter on device bond1 [ 71.927689][ T6425] netlink: 60 bytes leftover after parsing attributes in process `syz.3.155'. [ 71.954016][ T6428] /dev/sg0: Can't lookup blockdev [ 71.959102][ T6427] usb usb8: usbfs: process 6427 (syz.0.156) did not claim interface 0 before use [ 72.085323][ T6439] netlink: 48 bytes leftover after parsing attributes in process `syz.0.158'. [ 72.141983][ T6443] netlink: 'syz.3.159': attribute type 4 has an invalid length. [ 72.144646][ T6420] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 72.147085][ T6420] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 72.150610][ T6443] netlink: 'syz.3.159': attribute type 8 has an invalid length. [ 72.153125][ T6443] netlink: 212 bytes leftover after parsing attributes in process `syz.3.159'. [ 72.156381][ T6447] binder: 6446:6447 ioctl c0096616 200000000040 returned -22 [ 72.220354][ T6420] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 72.222547][ T6420] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 72.244737][ T5097] Bluetooth: hci2: command 0x0c1a tx timeout [ 72.305678][ C1] ------------[ cut here ]------------ [ 72.308223][ C1] workqueue: cannot queue hci_cmd_timeout on wq hci1 [ 72.310916][ C1] WARNING: kernel/workqueue.c:2305 at __queue_work+0xd2d/0x12b0, CPU#1: ksoftirqd/1/28 [ 72.314743][ C1] Modules linked in: [ 72.316484][ C1] CPU: 1 UID: 0 PID: 28 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT(full) [ 72.320102][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 72.324103][ C1] RIP: 0010:__queue_work+0xd31/0x12b0 [ 72.326265][ C1] Code: 00 00 00 fc ff df 49 8d 94 24 70 01 00 00 48 89 f9 48 c1 e9 03 80 3c 01 00 0f 85 52 05 00 00 48 8d 3d d3 ea 55 0f 48 8b 75 18 <67> 48 0f b9 3a 48 b8 00 00 00 00 00 fc ff df 48 89 ea 48 c1 ea 03 [ 72.333848][ C1] RSP: 0018:ffffc90000677a00 EFLAGS: 00010046 [ 72.336295][ C1] RAX: dffffc0000000000 RBX: 0000000000000100 RCX: 1ffff1100a50f94e [ 72.339450][ C1] RDX: ffff8880282ca170 RSI: ffffffff8aae2b10 RDI: ffffffff9125b1e0 [ 72.342625][ C1] RBP: ffff88805287ca58 R08: 0000000000000005 R09: 0000000000000000 [ 72.345765][ C1] R10: 0000000000000100 R11: 0000000000000000 R12: ffff8880282ca000 [ 72.348962][ C1] R13: 0000000000000000 R14: ffffffff81cfcca0 R15: 0000000000000001 [ 72.352176][ C1] FS: 0000000000000000(0000) GS:ffff8880d5edc000(0000) knlGS:0000000000000000 [ 72.355772][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 72.358414][ C1] CR2: 0000200000002000 CR3: 000000005ad5c000 CR4: 0000000000352ef0 [ 72.361621][ C1] Call Trace: [ 72.363004][ C1] [ 72.364228][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 72.366569][ C1] call_timer_fn+0x19a/0x610 [ 72.368449][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 72.370541][ C1] ? debug_object_assert_init+0x1c4/0x310 [ 72.372825][ C1] ? __run_timers+0x560/0xb00 [ 72.374739][ C1] ? __run_timers+0x560/0xb00 [ 72.376686][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 72.379012][ C1] __run_timers+0x570/0xb00 [ 72.380862][ C1] ? __pfx___run_timers+0x10/0x10 [ 72.382925][ C1] ? finish_task_switch.isra.0+0x2c5/0x10c0 [ 72.385297][ C1] ? _raw_spin_lock_irq+0x45/0x50 [ 72.387344][ C1] run_timer_base+0x114/0x190 [ 72.389261][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 72.391384][ C1] run_timer_softirq+0x1a/0x50 [ 72.393336][ C1] handle_softirqs+0x1ea/0x9b0 [ 72.395276][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 72.397435][ C1] ? run_ksoftirqd+0x5b/0x60 [ 72.399336][ C1] ? rcu_is_watching+0x12/0xc0 [ 72.401347][ C1] ? __pfx_run_ksoftirqd+0x10/0x10 [ 72.403410][ C1] run_ksoftirqd+0x38/0x60 [ 72.405250][ C1] smpboot_thread_fn+0x3d3/0xaa0 [ 72.407245][ C1] ? kthread+0x13a/0x450 [ 72.408976][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 72.411211][ C1] kthread+0x370/0x450 [ 72.412873][ C1] ? __pfx_kthread+0x10/0x10 [ 72.414725][ C1] ret_from_fork+0x72b/0xd50 [ 72.416632][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 72.418691][ C1] ? __switch_to+0x800/0x10f0 [ 72.420621][ C1] ? __pfx_kthread+0x10/0x10 [ 72.422509][ C1] ret_from_fork_asm+0x1a/0x30 [ 72.424490][ C1] [ 72.425751][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 72.428681][ C1] CPU: 1 UID: 0 PID: 28 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT(full) [ 72.432294][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 72.436281][ C1] Call Trace: [ 72.437676][ C1] [ 72.438837][ C1] dump_stack_lvl+0x100/0x190 [ 72.440800][ C1] vpanic+0x552/0x970 [ 72.442453][ C1] ? __pfx_vpanic+0x10/0x10 [ 72.444314][ C1] panic+0xd1/0xe0 [ 72.445866][ C1] ? __pfx_panic+0x10/0x10 [ 72.447474][ C1] ? check_panic_on_warn+0x1f/0x90 [ 72.449118][ C1] check_panic_on_warn.cold+0x19/0x34 [ 72.450658][ C1] ? __queue_work+0xd2d/0x12b0 [ 72.452069][ C1] __warn.cold+0x191/0x318 [ 72.453364][ C1] __report_bug+0x30f/0x440 [ 72.454922][ C1] ? __queue_work+0xd2d/0x12b0 [ 72.456329][ C1] ? __pfx___report_bug+0x10/0x10 [ 72.457756][ C1] ? find_held_lock+0x2b/0x80 [ 72.459130][ C1] ? sched_balance_rq+0x19ab/0x3b10 [ 72.460651][ C1] ? __pfx_hci_cmd_timeout+0x10/0x10 [ 72.462202][ C1] ? _raw_spin_unlock+0x28/0x50 [ 72.463698][ C1] ? look_up_lock_class+0x55/0x120 [ 72.465186][ C1] report_bug_entry+0xe1/0x290 [ 72.466580][ C1] ? __queue_work+0xd31/0x12b0 [ 72.467976][ C1] handle_bug+0x1cd/0x2a0 [ 72.469229][ C1] exc_invalid_op+0x17/0x50 [ 72.470563][ C1] asm_exc_invalid_op+0x1a/0x20 [ 72.471984][ C1] RIP: 0010:__queue_work+0xd31/0x12b0 [ 72.473545][ C1] Code: 00 00 00 fc ff df 49 8d 94 24 70 01 00 00 48 89 f9 48 c1 e9 03 80 3c 01 00 0f 85 52 05 00 00 48 8d 3d d3 ea 55 0f 48 8b 75 18 <67> 48 0f b9 3a 48 b8 00 00 00 00 00 fc ff df 48 89 ea 48 c1 ea 03 [ 72.479065][ C1] RSP: 0018:ffffc90000677a00 EFLAGS: 00010046 [ 72.480871][ C1] RAX: dffffc0000000000 RBX: 0000000000000100 RCX: 1ffff1100a50f94e [ 72.483149][ C1] RDX: ffff8880282ca170 RSI: ffffffff8aae2b10 RDI: ffffffff9125b1e0 [ 72.485506][ C1] RBP: ffff88805287ca58 R08: 0000000000000005 R09: 0000000000000000 [ 72.487826][ C1] R10: 0000000000000100 R11: 0000000000000000 R12: ffff8880282ca000 [ 72.490119][ C1] R13: 0000000000000000 R14: ffffffff81cfcca0 R15: 0000000000000001 [ 72.492388][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 72.494124][ C1] ? __pfx_hci_cmd_timeout+0x10/0x10 [ 72.495672][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 72.497379][ C1] call_timer_fn+0x19a/0x610 [ 72.498724][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 72.500223][ C1] ? debug_object_assert_init+0x1c4/0x310 [ 72.501848][ C1] ? __run_timers+0x560/0xb00 [ 72.503127][ C1] ? __run_timers+0x560/0xb00 [ 72.504440][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 72.506004][ C1] __run_timers+0x570/0xb00 [ 72.507238][ C1] ? __pfx___run_timers+0x10/0x10 [ 72.508698][ C1] ? finish_task_switch.isra.0+0x2c5/0x10c0 [ 72.510483][ C1] ? _raw_spin_lock_irq+0x45/0x50 [ 72.512031][ C1] run_timer_base+0x114/0x190 [ 72.513456][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 72.515077][ C1] run_timer_softirq+0x1a/0x50 [ 72.516553][ C1] handle_softirqs+0x1ea/0x9b0 [ 72.518026][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 72.519627][ C1] ? run_ksoftirqd+0x5b/0x60 [ 72.521017][ C1] ? rcu_is_watching+0x12/0xc0 [ 72.522447][ C1] ? __pfx_run_ksoftirqd+0x10/0x10 [ 72.524008][ C1] run_ksoftirqd+0x38/0x60 [ 72.525343][ C1] smpboot_thread_fn+0x3d3/0xaa0 [ 72.526848][ C1] ? kthread+0x13a/0x450 [ 72.528140][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 72.529799][ C1] kthread+0x370/0x450 [ 72.531029][ C1] ? __pfx_kthread+0x10/0x10 [ 72.532437][ C1] ret_from_fork+0x72b/0xd50 [ 72.533889][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 72.535467][ C1] ? __switch_to+0x800/0x10f0 [ 72.536908][ C1] ? __pfx_kthread+0x10/0x10 [ 72.538294][ C1] ret_from_fork_asm+0x1a/0x30 [ 72.539761][ C1] [ 72.541475][ C1] Kernel Offset: disabled [ 72.542738][ C1] Rebooting in 86400 seconds..