last executing test programs: 41.823489082s ago: executing program 2 (id=12): socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x82, &(0x7f00000003c0)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x18, 0x0, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @sack_perm, @md5sig={0x13, 0x3c, "91d785d58954605c802acf9f965fe399"}]}}}}}}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000013c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x378, 0x120, 0x1170, 0x1398, 0x0, 0x1170, 0x2a8, 0x1398, 0x1398, 0x2a8, 0x1398, 0x3, 0x0, {[{{@ipv6={@empty, @mcast1, [], [], 'ip6tnl0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x21}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@uncond, 0x0, 0x160, 0x188, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @private0, @private0, @loopback}}]}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d8) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0xc}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000010000e3850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = socket(0x15, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) process_madvise(0xffffffffffffffff, &(0x7f0000000200), 0x1000000000000276, 0x0, 0x0) getsockopt(r2, 0x200000000114, 0x271c, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001011000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6, @ANYBLOB], 0x44}}, 0x0) 40.131446946s ago: executing program 4 (id=5): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) r2 = socket$kcm(0x29, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x9) prctl$PR_SCHED_CORE(0x3e, 0x4, r3, 0x3, &(0x7f00000001c0)) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) sendmmsg$inet(r2, &(0x7f0000001500)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f00000006c0)="08b5b899", 0x4}], 0x1, &(0x7f0000000e40)=ANY=[], 0xd0}}], 0x1, 0x0) close(r2) 39.860199684s ago: executing program 4 (id=18): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000010700000000000000f9000018110000", @ANYRES8=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x5, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffd}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = gettid() sched_setscheduler(r4, 0x0, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000018384712b21bea9500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000cc5620f8e591895902806413ca3bcc4bcb1c4d74e9c44cf9d7aca127fa1962d03993a537d39fb32c5876fd712d420fc6e29415e6dc83b293ab8754f05eb8b8dc86d801a131bcfe3ac405d17cdd5babf359345b74a47f0a014f636f5327bdefb4a43f2b50e9fc44c47f81a783ada67c2647667d0e2402d245082c1ac13893ffb29a97132f62719d3975428286488a74fe5e6280d177ccd78bce169747604a373e0532"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r9}, 0x10) r10 = socket(0xa, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r10, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x2, 0x230, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200004c0], 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff01000000030000000000000081006e7230000000000000002000000000007465616d300000000000000000000000766c616e30000000000000010001000000000068307b746f5f7465616d000000aaaaaaaaaabb000000000000aaaaaaaaaabb0000000000000000d0000000d000000000010000766c616e0069df4e5100000000000000000000079ba31300000000000000000008000000000001010000650000000700636f6e6e6c6162656c0000000000000000000000000000000000000020000000080000000000000000000000000000004e4651544555450000000000007f000000000000000000000000000000000000080000000000000000000000000000040000000000000000000000004b5d0000000000000000000000000000000000000000000001000000ffffffff0000000000000000000000000004000000000000000000000000000000000000000000000000000001000000feffffff010000000b000000000000000000626f6e643000000000000000000000007465616d300000000000000000000000626f6e64300000000000006c73c387735cc18268315f746f5f62726964676500aaaaaaaaaabb000000000000ffffffffffff00000008000000007000000070000000a0000000434f4e4e5345434d41524b0000000000827900000000000000000000000000000800"/560]}, 0x2a8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000080005300000000faff0000940000000fad413e550000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r11 = socket$pppl2tp(0x18, 0x1, 0x1) r12 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r11, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, r12, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) r13 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r13, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)=@getsa={0x28, 0x12, 0x1, 0x0, 0x0, {@in=@broadcast, 0x0, 0x0, 0xff}}, 0x28}}, 0x0) getpeername$packet(r11, 0x0, &(0x7f0000000100)) 38.680957572s ago: executing program 2 (id=19): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000010000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0xc044) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0xffffffffffffff66, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000001000000000000000a3c000000120a01010000000000000000020000000900020073797a310000000008000440000000000900010073797a30000000000800034000000009"], 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 38.340306708s ago: executing program 2 (id=21): openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000001c0)={0x1, @win={{0x0, 0x9, 0xfffffffd}, 0x2, 0x8, &(0x7f0000000100)={{0x1095c187, 0xc73e, 0xdeb, 0x100}, &(0x7f00000000c0)={{0x0, 0x5fbd, 0x7}, &(0x7f0000000080)={{0x6, 0x5, 0x2, 0xfffffffe}}}}, 0x10001, &(0x7f0000000140)="7fabd02894f8c1c21b41894cea38319617de258b53163350d33d289aa10f309ee0715ed3fd5ec6e27d6525d1b625304a67131fa8dade1cff8c5b6f7d8c50ccc403e574fa8b838a3e244222f412a55c78026cb7e0767db1300728431198f2a1ca1dd2377c4ef3807849582ce0309810", 0x6}}) fcntl$notify(r0, 0x402, 0x29) prlimit64(0x0, 0x8, &(0x7f0000000140)={0x8, 0x8b}, 0x0) chdir(0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) r4 = getpid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000480)='xen_mc_flush\x00', r3}, 0x46) process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r5 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x1, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88bd9edace00000000000000002100000002ff02000000000000000000000000000104004e20004d03"], 0x0) recvmsg(r5, &(0x7f0000000340)={0x0, 0x2, &(0x7f0000000280), 0x45}, 0x0) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xb635773f06ebbeee, 0x41013, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f00000003c0), 0x0, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x0, 0x2, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYRES64=r2], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00', r9}, 0x10) socket$tipc(0x1e, 0x5, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000240)={0x0, @loopback, @private}, &(0x7f0000000280)=0xe0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000440)={@ifindex=r10, r9, 0x1a, 0x2000, 0x0, @prog_fd=r9}, 0x20) 38.318794124s ago: executing program 4 (id=22): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040b40461de63b800000001090224000100000000090400000103000000092100000001220700090581030000000000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) sched_setscheduler(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0x2) getpid() syz_open_dev$admmidi(&(0x7f0000000080), 0x5, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000000d80)=[{{&(0x7f0000000440)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000740)=""/146, 0x92}], 0x1}, 0x8}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f00000000c0)}, {&(0x7f0000000900)=""/93, 0x5d}, {&(0x7f0000000180)=""/47, 0x2f}, {&(0x7f00000002c0)=""/64, 0x40}, {&(0x7f0000000a80)=""/236, 0xec}, {&(0x7f0000000b80)=""/214, 0xd6}, {&(0x7f00000021c0)=""/4096, 0x1000}, {&(0x7f0000000980)=""/110, 0x6e}], 0x8, &(0x7f00000004c0)=""/5, 0x5}, 0x3}], 0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b70200001a000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="b752afb7eac2261e639998a26df3a90a8d67066818aaf601b66be9b89851a5eb044656f89e54aeb76496d9f81357944f9ac7e81b3defefe9c2b387a4b46e3c31a5c089e425e832af7b4be34d75f03ac0c44d4e9a5fa5e7dec09a74a480fb834eec7dd2d4ebd971955626df9af2bd0aeb5504f0b4ae8c104520ff7d8953"], 0x14}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000050) syz_emit_vhci(&(0x7f0000000580)=ANY=[@ANYBLOB="02c8000af905000100011302000000d9702fcbe1f5f90034236f538b4f6df0ac1192514fe223364ef04a5071d2787b5d34bdabcaea06981787834772912835507571560092fa"], 0xf) mount$fuse(0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,use', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0]) writev(0xffffffffffffffff, &(0x7f0000001340)=[{&(0x7f0000000a40)='e', 0x1}], 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r1}, 0x38) 35.520813542s ago: executing program 2 (id=27): creat(0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) rename(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) creat(0x0, 0x0) mlock2(&(0x7f0000ff6000/0x4000)=nil, 0x4000, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2, 0x2}, 0x10) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r2, r1, 0x2, 0x2, 0x0, @link_id}, 0x20) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000002c0)='contention_end\x00', r4}, 0x10) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r3, 0x54a3) r5 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f00000005c0)={r6, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab59fc179fd1f80600000000000000c6a4b4e00d9683dda1af1ea89df2bb0000000300000000000000000000fdec00", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x204000, 0x0) ioctl$TUNGETVNETBE(r7, 0x800454df, &(0x7f00000000c0)=0x1) close_range(r3, 0xffffffffffffffff, 0x0) 35.305761123s ago: executing program 2 (id=30): setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000003c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xffffffffffffff4b) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) recvmsg(r3, &(0x7f0000000e80)={0x0, 0x0, 0x0}, 0x40010000) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[], &(0x7f00002bf000)='GPL\x00', 0x3, 0xb7, &(0x7f0000000040)=""/183, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x90) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000000180)={0xffffffffffffffff, r4}) syz_open_dev$sndpcmc(&(0x7f0000000480), 0x0, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0x3e, &(0x7f00000000c0)=0x103, 0x4) bind$llc(r7, &(0x7f0000000340)={0x1a, 0x308, 0x1, 0x0, 0x0, 0x4, @local}, 0x10) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00', 0xfffffffe}) write$sndseq(r6, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @time={0x88f, 0x2}, {}, {}, @raw32}], 0x1c) 34.400563925s ago: executing program 4 (id=32): syz_usb_control_io(0xffffffffffffffff, &(0x7f00000004c0)={0x18, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\a'], 0x0, 0x0, 0x0, 0x0}, 0x0) madvise(&(0x7f0000133000/0x1000)=nil, 0x1000, 0x15) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000aa877e10702750909711000000010902120001000000000904"], 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @window, @sack_perm, @sack_perm, @timestamp, @timestamp, @timestamp, @timestamp], 0x20000149) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRES8=r3]) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fdinfo\x00') getdents(r4, &(0x7f0000000040)=""/104, 0x68) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r7}, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bind$tipc(r4, &(0x7f00000001c0)=@name={0x1e, 0x2, 0x0, {{0x0, 0x2}, 0x4}}, 0x10) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r6}, 0xc) r9 = syz_open_procfs$pagemap(0x0, &(0x7f0000000140)) write$FUSE_LK(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, {{0x0, 0xfffffffffffe}}}, 0x28) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000080)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x20) ioctl$FS_IOC_SETFLAGS(r9, 0xc0606610, &(0x7f0000000040)=0x60) 33.868605351s ago: executing program 2 (id=33): unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f0080bd2dca8a9848a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade", 0x55}], 0x1}, 0x0) (fail_nth: 4) 10.895545725s ago: executing program 1 (id=73): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x2, 0xfff, 0x5}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) r5 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) ioctl$IOC_PR_PREEMPT(r5, 0x40046109, &(0x7f0000000040)={0xf0}) ioctl$CEC_S_MODE(r5, 0x40046109, &(0x7f0000000080)=0xd0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r4) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0x84, r6, 0x200, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xcbf, 0x33}}}}, [@NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x56}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x5c, 0x84, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x6, 0x1, @random="c3bb"}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="43e837a85b23"}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x1c, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x9}, @NL80211_BAND_6GHZ={0x8}, @NL80211_BAND_6GHZ={0x8}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8}]}]}, 0x84}}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc08, 0x3, 0x468, 0xc, 0x5002004a, 0xb, 0x310, 0xea13, 0x3d0, 0x3c8, 0x3c8, 0x3d0, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'erspan0\x00', 'ip6tnl0\x00'}, 0x0, 0x2c8, 0x310, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2}}, @common=@ttl={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4c8) r7 = open(0x0, 0x0, 0x0) fcntl$setsig(r7, 0xa, 0x21) creat(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r8 = socket(0x40000000015, 0x5, 0x0) connect$inet(r8, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) bind$inet(r8, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) sendmsg$xdp(r8, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r8, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/11, 0xb}}], 0x5df, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000010000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc06}, 0x90) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='io_uring_link\x00', r9}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 10.129586519s ago: executing program 1 (id=74): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_int(r0, 0x1, 0xf, 0x0, &(0x7f0000000080)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0xc9) getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x805}, 0x840) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040), 0x76dc) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f00000025c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r7 = fanotify_init(0x4, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) fanotify_mark(r7, 0x101, 0x20, r8, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 9.1779631s ago: executing program 1 (id=76): socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) r0 = creat(0x0, 0x0) close(r0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) geteuid() close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setreuid(0x0, 0xee00) setreuid(0xee00, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000100)={0x0, 0x0, {}, 0x5}) socket$packet(0x11, 0x3, 0x300) syz_usb_connect(0x0, 0x24, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x4c, 0x97, 0xa6, 0x20, 0xa97a, 0x5131, 0xc000, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x8, 0x4, 0x50}}]}}]}}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$ax25(0x3, 0x2, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) syz_genetlink_get_family_id$SEG6(&(0x7f00000003c0), 0xffffffffffffffff) socket$inet6_udplite(0xa, 0x2, 0x88) 8.417941005s ago: executing program 0 (id=77): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000800000000000000000000730112000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14}, 0x90) 7.848404954s ago: executing program 0 (id=79): add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$cec(0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x40004}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) bind$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x1b, 0x0, 0x1, 0x5}, 0x14) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000040)={0x2, @pix_mp={0x0, 0x0, 0x50323234}}) 6.744554686s ago: executing program 0 (id=80): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0x3, &(0x7f0000000200)=ANY=[@ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) capset(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) preadv(r2, &(0x7f0000001880), 0x0, 0x0, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/reserved_size', 0x111042, 0x100) lseek(r3, 0x7, 0x1) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) mkdirat(r2, &(0x7f0000000300)='./file0\x00', 0x0) fcntl$setsig(0xffffffffffffffff, 0x3, 0x0) ioctl$VIDIOC_SUBDEV_G_EDID(0xffffffffffffffff, 0xc0285628, &(0x7f00000002c0)={0x0, 0x1151, 0x4, '\x00', &(0x7f0000000280)=0x4}) openat(r3, &(0x7f0000000180)='./file0\x00', 0x0, 0x20) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', &(0x7f0000000080)={0x0, 0x0, 0x4}, 0x18) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000180)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000500)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYBLOB="2c726f6f746d6f64653d3030303030303030c34db07b30303030302c757300010000643d000000000000", @ANYRESDEC=0x0, @ANYBLOB="79468ca42d325e9221ad619fd7891b9806836aa5a72f8a3289032bd542ed4da058829de8920ce6708cc00360638a89bcffe1a407cbd3a8e0f40e368208f931a81647bf73296fc643b383209efefa74220bd2", @ANYRESDEC=r2, @ANYRES8=r5, @ANYRES8=r1, @ANYBLOB="fbe9aad9c7cfc1ef54859944e9a5a0a1516ae9e23dd6c93f8919c20f73274dcd8c0590d725dc712fca63182a6dd3fe1c6ccef04c23f975b00b43992361edff82a2a46076276ed4e7a8067d25f3f8386f900db1dac55ed643d5fe7747ea4617e6ec6b23539e6bbf", @ANYRES16=0x0]) listxattr(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) chown(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) umount2(&(0x7f0000001540)='./file0\x00', 0x2) dup3(r4, r5, 0x0) 6.312282013s ago: executing program 0 (id=82): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x64, r2, 0x400, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9}}}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16fd}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}]]}, 0x64}}, 0x20004800) sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x19c, r2, 0x800, 0x70bd2a, 0x25dfdbff, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_REG_RULES={0xd0, 0x22, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x1}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xfffffbff}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x4}, @NL80211_ATTR_DFS_CAC_TIME={0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x3}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x6}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x2}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x9}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xd5}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x5}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x2}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x9}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x10001}, @NL80211_ATTR_DFS_CAC_TIME={0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x4}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x9}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x80000001}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x4}]}]}, @NL80211_ATTR_REG_RULES={0xac, 0x22, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x6}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x80000000}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xffff1420}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x3}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x7f}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x1}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x2}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x6}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x9}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x1b}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x58}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x3528}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x9}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x93d8}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x1}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x6b}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x687}]}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x19c}, 0x1, 0x0, 0x0, 0x2000c044}, 0x4080) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000080)={'wg2\x00'}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000440)={@val, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x10}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0x5865}}}}}}}, 0x3e) getsockopt$kcm_KCM_RECV_DISABLE(r3, 0x119, 0x1, &(0x7f0000000040), 0x4) 5.553546439s ago: executing program 3 (id=83): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000ac0)={0x3, &(0x7f0000000a80)=[{0x40}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x16}]}, 0x10) sendmmsg(r0, &(0x7f0000003180)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000c00)="26f2d136", 0x4}], 0x1}}], 0x1, 0x0) brk(0x2) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300), 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x20, &(0x7f00000000c0)={&(0x7f0000000140)=""/109, 0x6d, 0x0, &(0x7f00000001c0)=""/236, 0xec}}, 0x10) getpeername$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000003c0)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10) connect$inet(r4, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) removexattr(0x0, 0x0) r5 = syz_io_uring_setup(0x24f9, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r5, 0x6ed3, 0x0, 0x0, 0x0, 0x0) r8 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r8, 0x6256, 0x0, 0x0, 0x0, 0x0) shutdown(r4, 0x1) r11 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r11, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="021800001c000000000000000000000005000500000000000a00000000000000fe8000000000000000000000200000aa00000000000000000800120000000000000000000000000006000000000000000000000000000000e0000002000000000000000000000000fc01000000000000000000000000000005000600000000000a0000000000000000000000000000000000000000000000000000000000000008001900000000000a"], 0xe0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x43006cbca46ee8a1, 0x4, &(0x7f0000000400)=ANY=[@ANYRES8=r2, @ANYRES8=r3, @ANYRES8=r3, @ANYRES16=r0, @ANYRES8=0x0], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', r3, 0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0}, 0x90) 5.406959073s ago: executing program 3 (id=84): r0 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000240), &(0x7f0000000380)) syz_io_uring_setup(0x0, &(0x7f0000000100), &(0x7f0000000000)=0x0, &(0x7f00000001c0)) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xb, &(0x7f0000000180)=ANY=[@ANYRES16=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x6, 0x9}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b00)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = syz_io_uring_setup(0x24f7, &(0x7f0000000140)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_io_uring_submit(r8, r9, &(0x7f0000000740)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r10, 0x0}) io_uring_enter(r7, 0x2d3e, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, &(0x7f00000014c0)={{r2}, "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"}) sendmsg$IPCTNL_MSG_CT_NEW(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x98, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_DST={0x4}]}, 0x98}}, 0x0) 4.199310743s ago: executing program 3 (id=85): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, &(0x7f0000000040)={0xb}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = io_uring_setup(0x5ff1, &(0x7f0000000380)={0x0, 0xe981, 0x1, 0x3, 0x120}) io_uring_enter(r4, 0x2a96, 0x91ec, 0x18, 0x0, 0x0) socket$packet(0x11, 0xa, 0x300) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0x5) setuid(r6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x8, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000020b4321f00000000000a00630018000000", @ANYRES32, @ANYBLOB="0000000000000000b706000014000000b703000000000000850000002a000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x100b, &(0x7f0000001e40)=""/4107}, 0x90) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r8 = openat$cgroup_devices(r7, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r8, &(0x7f0000000140)=ANY=[@ANYBLOB='b 75:*\twr'], 0xa) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)=@req3, 0xfeda) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) 4.047773277s ago: executing program 1 (id=86): r0 = syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000240), &(0x7f0000000380)) syz_io_uring_setup(0x0, &(0x7f0000000100), &(0x7f0000000000)=0x0, &(0x7f00000001c0)) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xb, &(0x7f0000000180)=ANY=[@ANYRES16=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x6, 0x9}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b00)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000740)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r7, 0x0}) io_uring_enter(0xffffffffffffffff, 0x2d3e, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x41}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, &(0x7f00000014c0)={{r2}, "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"}) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x98, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_DST={0x4}]}, 0x98}}, 0x0) 3.194936928s ago: executing program 3 (id=87): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000040)=0x7, 0x4) r1 = dup(r0) bind$unix(r1, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e) syz_usb_connect(0x0, 0x2d, &(0x7f00000006c0)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f000905", @ANYBLOB="a42b72"], 0x0) memfd_create(&(0x7f0000000700)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\xdd\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`jiu\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x0) r2 = syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000540)=ANY=[@ANYRESHEX=r1], 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000380)={'ip_vti0\x00', &(0x7f0000000340)={'syztnl0\x00', 0x0, 0x0, 0x8, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x3d}}}}}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) r4 = socket(0x15, 0x5, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1f977623dc2375d5e8c4582dc55f87568e1bc1dea669a6453c3a5dc344609c5a324509ee5cda874f3362bcd5106c2a593c0ef506fd41afeb0c2c713abc920728f1deef6e0c69a4a76174f15f6a"], 0x0, 0x29}, 0x20) getsockopt(r4, 0x200000000114, 0x2717, 0x0, &(0x7f0000000000)) ioctl$KVM_GET_DIRTY_LOG(r5, 0x4010ae42, &(0x7f0000000080)={0x2710, 0x0, &(0x7f0000644000/0x3000)=nil}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000001800110700000000000000001c1400343af42d01000000000500130000000000e25df06bbd2c2442967df541a29494c0dc8deef75c66c0519b186642c3f532265d2e8f2d491a51c54057d9f513b49c2029ec75a2f66a1e2cf03003b3891775caa2ade6831e2d24e091d7ceec4353e5ef0da7934b529b075c07efd45c89d7314ab48476cf5f86702cf683cf14722c284519feaef5d6bab7a6448f6007d751fb9a26113c859146aaf2b5652fa80e06d2"], 0x24}}, 0x0) write$binfmt_script(r3, &(0x7f0000000240), 0x208e24b) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003000012002505a8a4f0"], 0x0) socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000140), 0x0) syz_usb_control_io(r2, &(0x7f00000000c0)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) open(&(0x7f0000000480)='./file0\x00', 0x10197f, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x0, 0x4, 0x8, 0x101, 0x0, 0x1}, 0x48) 2.589509534s ago: executing program 1 (id=88): bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa}, 0x48) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x36, 0x4, 0x0, 0x0, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x401, 0x5, 0x0, 0x66, 0x0]}, @timestamp_prespec={0x44, 0x44, 0xc0, 0x3, 0x1, [{@private=0xa010100}, {@multicast1, 0x5}, {@remote}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x65c}, {@broadcast}, {@empty, 0x7}, {@multicast1, 0xffd200}, {@private=0xa010100, 0x7}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x8, [{@remote}, {@remote}, {@multicast2}, {@private=0xa010101}, {}, {@broadcast, 0x52b1}, {@multicast2, 0xfffffffc}]}, @noop, @noop, @end, @lsrr={0x83, 0xf, 0xdc, [@private=0xa010102, @rand_addr, @multicast1]}, @rr={0x7, 0x17, 0x0, [@dev, @remote, @multicast1, @private=0xa010102, @remote]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) dup(r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = socket(0x1e, 0x805, 0x0) connect$tipc(r3, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{}, 0x2}}, 0x10) connect$tipc(r3, &(0x7f0000000000)=@id, 0x10) close(r3) 2.349214797s ago: executing program 1 (id=89): r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket$xdp(0x2c, 0x3, 0x0) dup(0xffffffffffffffff) r1 = openat$smackfs_load(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/load2\x00', 0x2, 0x0) read$FUSE(r1, &(0x7f0000004fc0)={0x2020}, 0x2020) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = io_uring_setup(0x30d3, &(0x7f00000000c0)) r4 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x42, 0x40, 0x42}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xd, 0x10, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x890f3}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000300)='GPL\x00', 0x1, 0x1d, &(0x7f0000000080)=""/29, 0x0, 0x61, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x90) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mknod(&(0x7f0000000540)='./file1\x00', 0x0, 0x0) mount$afs(&(0x7f0000000480)=ANY=[@ANYBLOB='#'], &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) ioctl$sock_netrom_SIOCDELRT(r2, 0x890c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x10, r2, 0x64d6c000) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28bd, 0x55, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_control_io$hid(r8, &(0x7f0000000680)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x0, "8826a169"}]}}, 0x0}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x41, 0x3, 0x260, 0xf8, 0x0, 0x0, 0xf8, 0x0, 0x1c8, 0x1f0, 0x1f0, 0x1c8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @remote, 0x0, 0x0, 'wlan1\x00', 'wg1\x00', {}, {}, 0x6}, 0x0, 0xd0, 0xf8, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}, @common=@inet=@socket3={{0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ip={@broadcast, @private, 0x0, 0x0, 'veth1_to_team\x00', 'sit0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2c0) 826.546837ms ago: executing program 0 (id=90): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x2c}}}, 0x1e) connect$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @multicast2}}, 0x1e) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$nl_route(r2, &(0x7f0000000600)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=@ipv6_getmulticast={0x14, 0x3a, 0x320, 0x70bd28, 0x25dfdbfc, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000801}, 0x2404c045) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r3) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r4, @ANYBLOB="01000000000000000000010000000c0005000c000000000000000c0002000000020000000000040007800c000800000000000000000008000a00000000004400078008000100", @ANYRES32, @ANYBLOB="38000100", @ANYRES32=r5, @ANYBLOB="64800400", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="080001"], 0x90}}, 0x0) 568.290758ms ago: executing program 0 (id=91): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f00000003c0)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote={{}, 0x0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x3, &(0x7f0000000740)='|2\n'}}}}], 0x1c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=@newqdisc={0x4c, 0x14, 0x0, 0x0, 0x0, {0x2}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}]}]}, 0x4c}}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000a00)={[], 0x0, 0x78469555c77fef7b}) socket(0x1e, 0x1, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(r4, 0x29, 0x6, &(0x7f0000000180)="10000000000000002900000043000000", 0x10) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0) mlock(&(0x7f0000fef000/0x2000)=nil, 0x2000) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x1001) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000810087406d040e0a759400000001090212000100000000090400200003"], 0x0) syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000140)={0x1}) 293.558689ms ago: executing program 3 (id=92): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000080)={0x1d, r1, 0x2}, 0x18) sendmmsg$unix(r0, &(0x7f000000a5c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f000000a540)="b4", 0x1}], 0x1}, 0x500}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 0s ago: executing program 3 (id=93): read$FUSE(0xffffffffffffffff, &(0x7f000000e280)={0x2020}, 0x2020) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @dev}, 0x10) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82000000000", @ANYRES32=r4, @ANYBLOB="000080000000000018003480050035"], 0x38}, 0x1, 0x300}, 0x0) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0xff, 0x0, r2, 0x8001, '\x00', r4, r5, 0x0, 0x0, 0x4}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x5, 0xf, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x1b}}, {{0x5, 0x0, 0xb}, {0x15}}, [], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='task\x00') lseek(r6, 0x3, 0x0) getdents64(r6, 0xffffffffffffffff, 0x43) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x6}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) pivot_root(&(0x7f0000000500)='./file0\x00', 0x0) getdents64(r6, &(0x7f00000002c0)=""/170, 0xaa) clock_gettime(0x3, &(0x7f0000000080)) clock_settime(0x0, &(0x7f0000000000)={0x77359400}) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) syz_emit_ethernet(0x9a, &(0x7f0000000440)={@broadcast, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x8c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, {0x1c, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @dev, @local, {[@timestamp_prespec={0x44, 0x4}, @ssrr={0x89, 0xf, 0x0, [@private, @broadcast, @broadcast]}, @timestamp_addr={0x44, 0x44, 0x0, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@private}, {}, {@local}, {@loopback}, {@private}, {@multicast2}, {@broadcast}]}, @timestamp={0x44, 0x4}]}}}}}}}, 0x0) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.202' (ED25519) to the list of known hosts. [ 56.888652][ T5201] cgroup: Unknown subsys name 'net' [ 57.024703][ T5201] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 58.435400][ T5201] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 61.902600][ T5214] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 61.911657][ T5214] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 61.919728][ T5214] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 61.928152][ T5214] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 61.936985][ T5214] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 61.944388][ T5214] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 61.945436][ T5219] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 61.960590][ T5219] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 61.971048][ T5219] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 61.981248][ T5219] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 61.989020][ T5219] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 61.996484][ T5219] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 62.039016][ T5214] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 62.047616][ T5214] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 62.057690][ T5214] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 62.068207][ T5214] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 62.076870][ T5214] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 62.084579][ T5214] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 62.134225][ T5214] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 62.142745][ T5214] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 62.151243][ T5214] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 62.167840][ T5214] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 62.175642][ T5214] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 62.183582][ T5214] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 62.216167][ T5214] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 62.225557][ T5214] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 62.234158][ T5214] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 62.246215][ T5214] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 62.266962][ T5214] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 62.274600][ T5214] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 62.325775][ T5211] chnl_net:caif_netlink_parms(): no params data found [ 62.500635][ T5211] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.508307][ T5211] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.515751][ T5211] bridge_slave_0: entered allmulticast mode [ 62.524634][ T5211] bridge_slave_0: entered promiscuous mode [ 62.567304][ T5211] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.576516][ T5211] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.584153][ T5211] bridge_slave_1: entered allmulticast mode [ 62.591220][ T5211] bridge_slave_1: entered promiscuous mode [ 62.683396][ T5211] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.696319][ T5211] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.813070][ T5211] team0: Port device team_slave_0 added [ 62.822707][ T5211] team0: Port device team_slave_1 added [ 62.904510][ T5215] chnl_net:caif_netlink_parms(): no params data found [ 62.930289][ T5225] chnl_net:caif_netlink_parms(): no params data found [ 62.941034][ T5211] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.948415][ T5211] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.974548][ T5211] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.019349][ T5211] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.026344][ T5211] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.053136][ T5211] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.064425][ T5220] chnl_net:caif_netlink_parms(): no params data found [ 63.151729][ T5228] chnl_net:caif_netlink_parms(): no params data found [ 63.163600][ T5215] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.171370][ T5215] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.179337][ T5215] bridge_slave_0: entered allmulticast mode [ 63.186007][ T5215] bridge_slave_0: entered promiscuous mode [ 63.225517][ T5215] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.232949][ T5215] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.240208][ T5215] bridge_slave_1: entered allmulticast mode [ 63.247323][ T5215] bridge_slave_1: entered promiscuous mode [ 63.303690][ T5211] hsr_slave_0: entered promiscuous mode [ 63.311709][ T5211] hsr_slave_1: entered promiscuous mode [ 63.379289][ T5215] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.391453][ T5215] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.410060][ T5220] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.419011][ T5220] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.426370][ T5220] bridge_slave_0: entered allmulticast mode [ 63.433459][ T5220] bridge_slave_0: entered promiscuous mode [ 63.489238][ T5220] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.496461][ T5220] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.506100][ T5220] bridge_slave_1: entered allmulticast mode [ 63.513551][ T5220] bridge_slave_1: entered promiscuous mode [ 63.520221][ T5225] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.527664][ T5225] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.534936][ T5225] bridge_slave_0: entered allmulticast mode [ 63.542104][ T5225] bridge_slave_0: entered promiscuous mode [ 63.556079][ T5228] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.563329][ T5228] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.570690][ T5228] bridge_slave_0: entered allmulticast mode [ 63.577695][ T5228] bridge_slave_0: entered promiscuous mode [ 63.585335][ T5228] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.593372][ T5228] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.600768][ T5228] bridge_slave_1: entered allmulticast mode [ 63.608173][ T5228] bridge_slave_1: entered promiscuous mode [ 63.631355][ T5225] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.641522][ T5225] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.649193][ T5225] bridge_slave_1: entered allmulticast mode [ 63.655917][ T5225] bridge_slave_1: entered promiscuous mode [ 63.694729][ T5215] team0: Port device team_slave_0 added [ 63.703568][ T5215] team0: Port device team_slave_1 added [ 63.772047][ T5220] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.783583][ T5220] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.794847][ T5225] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.811714][ T5225] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.823544][ T5228] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.834934][ T5228] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.845016][ T5215] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.854019][ T5215] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.880845][ T5215] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.926162][ T5215] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.933198][ T5215] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.959512][ T5215] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.977678][ T5219] Bluetooth: hci0: command tx timeout [ 64.012392][ T5228] team0: Port device team_slave_0 added [ 64.030504][ T5220] team0: Port device team_slave_0 added [ 64.041913][ T5225] team0: Port device team_slave_0 added [ 64.050980][ T5225] team0: Port device team_slave_1 added [ 64.057240][ T5219] Bluetooth: hci1: command tx timeout [ 64.074537][ T5228] team0: Port device team_slave_1 added [ 64.082597][ T5220] team0: Port device team_slave_1 added [ 64.136827][ T5219] Bluetooth: hci2: command tx timeout [ 64.179584][ T5225] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.186586][ T5225] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.213484][ T5225] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.217262][ T5219] Bluetooth: hci3: command tx timeout [ 64.226477][ T5225] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.236564][ T5225] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.263315][ T5225] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.275255][ T5228] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.282742][ T5228] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.308775][ T5228] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.321621][ T5228] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.328725][ T5228] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.355135][ T5228] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.380489][ T5219] Bluetooth: hci4: command tx timeout [ 64.393395][ T5215] hsr_slave_0: entered promiscuous mode [ 64.399671][ T5215] hsr_slave_1: entered promiscuous mode [ 64.405688][ T5215] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.414108][ T5215] Cannot create hsr debugfs directory [ 64.453715][ T5220] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.460956][ T5220] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.487293][ T5220] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.500231][ T5220] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.507244][ T5220] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.533227][ T5220] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.636122][ T5228] hsr_slave_0: entered promiscuous mode [ 64.643637][ T5228] hsr_slave_1: entered promiscuous mode [ 64.652674][ T5228] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.661054][ T5228] Cannot create hsr debugfs directory [ 64.681501][ T5225] hsr_slave_0: entered promiscuous mode [ 64.688246][ T5225] hsr_slave_1: entered promiscuous mode [ 64.694410][ T5225] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.702885][ T5225] Cannot create hsr debugfs directory [ 64.785950][ T5220] hsr_slave_0: entered promiscuous mode [ 64.793030][ T5220] hsr_slave_1: entered promiscuous mode [ 64.799664][ T5220] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.807886][ T5220] Cannot create hsr debugfs directory [ 64.856204][ T5211] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 64.910757][ T5211] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 64.929096][ T5211] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 64.965588][ T5211] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 65.193091][ T5215] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 65.202624][ T5215] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 65.214081][ T5215] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 65.249837][ T5215] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 65.293963][ T5225] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 65.305655][ T5225] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 65.330100][ T5225] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 65.342651][ T5225] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 65.430461][ T5228] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 65.453899][ T5228] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 65.483700][ T5228] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 65.532600][ T5228] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 65.560334][ T5220] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 65.569973][ T5220] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 65.598696][ T5220] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 65.611398][ T5220] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 65.673037][ T5215] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.701891][ T5211] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.785501][ T5215] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.795879][ T5211] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.843023][ T151] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.850299][ T151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.862086][ T151] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.869298][ T151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.912563][ T5225] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.925007][ T151] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.932191][ T151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.942674][ T151] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.949826][ T151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.035544][ T5225] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.060367][ T5219] Bluetooth: hci0: command tx timeout [ 66.066237][ T5228] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.133929][ T151] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.141680][ T151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.149544][ T5219] Bluetooth: hci1: command tx timeout [ 66.160051][ T151] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.167211][ T151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.219839][ T5219] Bluetooth: hci2: command tx timeout [ 66.233199][ T5228] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.302655][ T5219] Bluetooth: hci3: command tx timeout [ 66.324018][ T5220] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.351872][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.359082][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.426389][ T151] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.433606][ T151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.457124][ T5219] Bluetooth: hci4: command tx timeout [ 66.486519][ T5215] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.557348][ T5220] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.596476][ T5211] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.611204][ T1290] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.618393][ T1290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.635425][ T5215] veth0_vlan: entered promiscuous mode [ 66.681705][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.688893][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.703397][ T5215] veth1_vlan: entered promiscuous mode [ 66.835697][ T5215] veth0_macvtap: entered promiscuous mode [ 66.859053][ T5215] veth1_macvtap: entered promiscuous mode [ 66.892673][ T5211] veth0_vlan: entered promiscuous mode [ 66.950300][ T5215] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.996166][ T5215] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.015699][ T5211] veth1_vlan: entered promiscuous mode [ 67.027866][ T5225] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.051316][ T5215] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.068368][ T5215] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.078093][ T5215] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.087993][ T5215] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.235148][ T5228] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.254705][ T5225] veth0_vlan: entered promiscuous mode [ 67.273036][ T5211] veth0_macvtap: entered promiscuous mode [ 67.289028][ T5211] veth1_macvtap: entered promiscuous mode [ 67.305902][ T5225] veth1_vlan: entered promiscuous mode [ 67.365522][ T5220] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.440363][ T151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.454669][ T5211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.472039][ T5211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.476760][ T151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.495080][ T5211] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.518155][ T5211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.529109][ T5211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.542071][ T5211] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.552321][ T5228] veth0_vlan: entered promiscuous mode [ 67.591676][ T5211] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.605063][ T5211] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.614509][ T5211] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.623868][ T5211] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.652062][ T5225] veth0_macvtap: entered promiscuous mode [ 67.669551][ T5228] veth1_vlan: entered promiscuous mode [ 67.685161][ T5225] veth1_macvtap: entered promiscuous mode [ 67.685550][ T151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.706286][ T151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.796012][ T5228] veth0_macvtap: entered promiscuous mode [ 67.814343][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.828652][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.839239][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.850489][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.872485][ T5225] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.896173][ T5228] veth1_macvtap: entered promiscuous mode [ 67.919030][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.931548][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.942882][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.954432][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.967663][ T5225] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.996567][ T5228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.036259][ T5228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.052641][ T5228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.065481][ T5228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.075424][ T5228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.092479][ T5228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.105473][ T5228] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.133621][ T5225] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.138389][ T5219] Bluetooth: hci0: command tx timeout [ 68.148967][ T5225] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.149031][ T5225] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.168703][ T5225] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.218853][ T5219] Bluetooth: hci1: command tx timeout [ 68.231341][ T5228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.242407][ T5228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.252837][ T5228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.263750][ T5228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.275752][ T5228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.286509][ T5228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.297716][ T5219] Bluetooth: hci2: command tx timeout [ 68.304791][ T5228] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.336251][ T5228] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.345376][ T5228] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.355725][ T5228] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.364715][ T5228] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.379853][ T5219] Bluetooth: hci3: command tx timeout [ 68.396836][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.407718][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.449486][ T5220] veth0_vlan: entered promiscuous mode [ 68.499803][ T5220] veth1_vlan: entered promiscuous mode [ 68.536985][ T5219] Bluetooth: hci4: command tx timeout [ 68.552233][ T151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.552816][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.569558][ T151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.584167][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.634539][ T5220] veth0_macvtap: entered promiscuous mode [ 68.664476][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.683302][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.770239][ T5220] veth1_macvtap: entered promiscuous mode [ 68.824735][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.868390][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.933347][ T5299] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1'. [ 69.146999][ T5220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.345857][ T5220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.505644][ T5220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.541134][ T5220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.562681][ T5220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.574012][ T5220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.589255][ T5220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.672883][ T5220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.699241][ T5220] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.718387][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 69.725268][ T5308] x_tables: duplicate underflow at hook 1 [ 69.754304][ T5220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.778103][ T5220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.791307][ T5220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.836710][ T5220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.863981][ T5220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.882599][ T5220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.894364][ T5220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.906848][ T5220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.939479][ T5220] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.982920][ T5220] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.993960][ T5220] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.006535][ T5220] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.017451][ T5220] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.136798][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.145568][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.231118][ T5318] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 70.267327][ T5219] Bluetooth: hci0: command tx timeout [ 70.297659][ T5219] Bluetooth: hci1: command tx timeout [ 70.385556][ T5219] Bluetooth: hci2: command tx timeout [ 70.456747][ T5219] Bluetooth: hci3: command tx timeout [ 70.618731][ T5219] Bluetooth: hci4: command tx timeout [ 70.917005][ T1298] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.992553][ T1298] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.024745][ T5321] xt_ecn: cannot match TCP bits for non-tcp packets [ 71.359570][ T5328] 9pnet: p9_errstr2errno: server reported unknown error œæçæŒÎsÅ‚Ümý¼§6°'ßtÿT ð#>÷‰r¹[›5´Û­ [ 71.742495][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.750503][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.754481][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.823164][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.087359][ T5221] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 72.106797][ T5258] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 72.313924][ T5258] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 72.336775][ T5221] usb 4-1: Using ep0 maxpacket: 32 [ 72.353482][ T5221] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 72.365050][ T5258] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 72.375722][ T5221] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.394968][ T5344] netlink: 2060 bytes leftover after parsing attributes in process `syz.0.17'. [ 72.395772][ T5258] usb 2-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice=b8.63 [ 72.423009][ T5344] netlink: 'syz.0.17': attribute type 1 has an invalid length. [ 72.426789][ T5221] usb 4-1: Product: syz [ 72.434792][ T5221] usb 4-1: Manufacturer: syz [ 72.449675][ T5258] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.458986][ T5221] usb 4-1: SerialNumber: syz [ 72.465979][ T5344] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.17'. [ 72.490060][ T5221] usb 4-1: config 0 descriptor?? [ 72.515815][ T5258] usb 2-1: config 0 descriptor?? [ 72.530787][ T5221] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 73.122722][ T5219] Bluetooth: Frame is too long (len 10, expected len 9) [ 73.133539][ T5342] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 73.693336][ T5352] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19'. [ 73.907665][ T5258] usbhid 2-1:0.0: can't add hid device: -71 [ 73.913838][ T5258] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 73.940412][ T5258] usb 2-1: USB disconnect, device number 2 [ 74.453641][ T5332] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 74.536003][ T5325] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 75.017340][ T5221] gspca_ov534_9: reg_r err -71 [ 75.073466][ T5369] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 75.078724][ T5325] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 75.125271][ T5325] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 75.135833][ T5325] usb 5-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice=b8.63 [ 75.147978][ T5325] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.155773][ T5364] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 75.168232][ T5325] usb 5-1: config 0 descriptor?? [ 75.376721][ T5221] gspca_ov534_9: Unknown sensor 0000 [ 75.376832][ T5221] ov534_9 4-1:0.0: probe with driver ov534_9 failed with error -22 [ 75.417219][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 75.431371][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 75.583326][ T5221] usb 4-1: USB disconnect, device number 2 [ 75.740685][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 75.942535][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 76.527593][ T5219] Bluetooth: Frame is too long (len 10, expected len 9) [ 76.590394][ T5219] Bluetooth: hci0: unexpected event for opcode 0x2026 [ 76.602848][ T5380] usb usb8: usbfs: process 5380 (syz.0.26) did not claim interface 0 before use [ 76.625536][ T5325] usbhid 5-1:0.0: can't add hid device: -71 [ 76.661282][ T5325] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 76.741773][ T5325] usb 5-1: USB disconnect, device number 2 [ 77.047579][ T5388] netlink: 76 bytes leftover after parsing attributes in process `syz.3.28'. [ 78.032231][ T5295] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 78.359621][ T25] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 78.491412][ T63] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.627413][ T25] usb 5-1: Using ep0 maxpacket: 16 [ 78.666482][ T25] usb 5-1: New USB device found, idVendor=2770, idProduct=9050, bcdDevice=11.97 [ 78.778662][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.799481][ T25] usb 5-1: config 0 descriptor?? [ 78.829126][ T25] gspca_main: sq905c-2.14.0 probing 2770:9050 [ 79.026357][ T63] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.117587][ T5295] usb 1-1: Using ep0 maxpacket: 16 [ 79.132234][ T5295] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 79.153641][ T5295] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 79.199487][ T5295] usb 1-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 79.240735][ T5295] usb 1-1: config 0 interface 0 has no altsetting 0 [ 79.264119][ T5295] usb 1-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 [ 79.343529][ T5295] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.355411][ T25] gspca_sq905c: sq905c_command: usb_control_msg failed (-110) [ 79.368351][ T63] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.389504][ T5295] usb 1-1: config 0 descriptor?? [ 79.407339][ T25] sq905c 5-1:0.0: Get version command failed [ 79.413418][ T25] sq905c 5-1:0.0: probe with driver sq905c failed with error -110 [ 79.636579][ T63] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.950622][ T63] bridge_slave_1: left allmulticast mode [ 79.965902][ T63] bridge_slave_1: left promiscuous mode [ 80.001620][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.039289][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 80.055964][ T63] bridge_slave_0: left allmulticast mode [ 80.090897][ T63] bridge_slave_0: left promiscuous mode [ 80.107680][ T5295] hid-generic 0003:045E:05DA.0001: hidraw0: USB HID v0.00 Device [HID 045e:05da] on usb-dummy_hcd.0-1/input0 [ 80.116243][ T5407] netlink: 2060 bytes leftover after parsing attributes in process `syz.3.36'. [ 80.131651][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.169323][ T5407] netlink: 'syz.3.36': attribute type 1 has an invalid length. [ 80.200836][ T5407] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.36'. [ 80.220516][ T5295] usb 1-1: USB disconnect, device number 2 [ 80.498131][ T5214] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 80.508531][ T5214] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 80.518589][ T5214] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 80.682599][ T5214] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 80.698555][ T5214] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 81.357130][ T5214] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 81.440266][ T5405] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 82.063844][ T8] cfg80211: failed to load regulatory.db [ 82.087072][ T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!! [ 82.096561][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 82.159663][ T5214] Bluetooth: hci0: unexpected event for opcode 0x2026 [ 82.184052][ T5420] usb usb8: usbfs: process 5420 (syz.0.39) did not claim interface 0 before use [ 82.496815][ T0] NOHZ tick-stop error: local softirq work is pending, handler #2c2!!! [ 82.576756][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 82.674627][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 82.714026][ T63] bond0 (unregistering): Released all slaves [ 82.848449][ T5424] Zero length message leads to an empty skb [ 83.420364][ T5214] Bluetooth: hci4: command tx timeout [ 84.188998][ T5436] netlink: 76 bytes leftover after parsing attributes in process `syz.3.44'. [ 84.203562][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 84.212262][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 88.238676][ T5447] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 88.249398][ T5214] Bluetooth: hci4: command tx timeout [ 88.412242][ T25] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 89.661339][ T5214] Bluetooth: hci0: unexpected event for opcode 0x2026 [ 89.664442][ T5463] usb usb8: usbfs: process 5463 (syz.0.50) did not claim interface 0 before use [ 89.939488][ T63] hsr_slave_0: left promiscuous mode [ 90.016217][ T63] hsr_slave_1: left promiscuous mode [ 90.035404][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 90.081795][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 90.120846][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 90.132353][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 90.179881][ T63] veth1_macvtap: left promiscuous mode [ 90.192960][ T63] veth0_macvtap: left promiscuous mode [ 90.206130][ T63] veth1_vlan: left promiscuous mode [ 90.220678][ T63] veth0_vlan: left promiscuous mode [ 90.297831][ T5214] Bluetooth: hci4: command tx timeout [ 90.445837][ T5219] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 90.456430][ T5219] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 90.466375][ T5219] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 90.479701][ T5219] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 90.504766][ T5219] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 90.512891][ T5219] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 91.349575][ T63] team0 (unregistering): Port device team_slave_1 removed [ 91.417934][ T63] team0 (unregistering): Port device team_slave_0 removed [ 91.425993][ T5482] hub 9-0:1.0: USB hub found [ 91.488373][ T5482] hub 9-0:1.0: 8 ports detected [ 92.111667][ T5409] chnl_net:caif_netlink_parms(): no params data found [ 92.379256][ T5214] Bluetooth: hci4: command tx timeout [ 92.617933][ T5214] Bluetooth: hci5: command tx timeout [ 93.543093][ T5497] 9pnet: p9_errstr2errno: server reported unknown error œæçæŒÎsÅ‚Ümý¼§6°'ßtÿT ð#>÷‰r¹[›5´Û­ [ 93.938315][ T5409] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.945459][ T5409] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.980544][ T5295] usb 5-1: USB disconnect, device number 3 [ 94.023347][ T5409] bridge_slave_0: entered allmulticast mode [ 94.072760][ T5409] bridge_slave_0: entered promiscuous mode [ 94.130350][ T5513] netlink: 4 bytes leftover after parsing attributes in process `syz.0.60'. [ 94.147640][ T5221] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 94.165491][ T5513] netlink: 'syz.0.60': attribute type 6 has an invalid length. [ 94.186394][ T5513] netlink: 'syz.0.60': attribute type 5 has an invalid length. [ 94.255524][ T5513] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 94.264847][ T5513] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 94.274451][ T5513] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 94.285149][ T5513] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 94.381882][ T5513] vxlan0: entered promiscuous mode [ 94.396903][ T5221] usb 4-1: Using ep0 maxpacket: 8 [ 94.407058][ T5409] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.427938][ T5221] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 94.443629][ T5409] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.452188][ T5221] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.480975][ T5409] bridge_slave_1: entered allmulticast mode [ 94.492423][ T5221] usb 4-1: Product: syz [ 94.498308][ T5409] bridge_slave_1: entered promiscuous mode [ 94.506364][ T5221] usb 4-1: Manufacturer: syz [ 94.511925][ T5221] usb 4-1: SerialNumber: syz [ 94.701617][ T5214] Bluetooth: hci5: command tx timeout [ 94.718923][ T5409] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.818008][ T5409] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.925379][ T5221] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 94.973818][ T5528] mmap: syz.0.62 (5528): VmData 37597184 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 95.060296][ T5533] ======================================================= [ 95.060296][ T5533] WARNING: The mand mount option has been deprecated and [ 95.060296][ T5533] and is ignored by this kernel. Remove the mand [ 95.060296][ T5533] option from the mount to silence this warning. [ 95.060296][ T5533] ======================================================= [ 95.095203][ C0] vkms_vblank_simulate: vblank timer overrun [ 95.104097][ T5533] tmpfs: Unknown parameter 'quotA' [ 95.131468][ T5533] overlayfs: conflicting lowerdir path [ 95.988579][ T5409] team0: Port device team_slave_0 added [ 98.830152][ T5214] Bluetooth: hci5: command tx timeout [ 98.883195][ T35] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.980947][ T5260] usb 4-1: USB disconnect, device number 3 [ 99.047339][ T5260] usblp0: removed [ 99.049281][ T5409] team0: Port device team_slave_1 added [ 99.784064][ T5563] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 100.073967][ T35] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.295204][ T35] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.525436][ T5580] ptrace attach of "./syz-executor exec"[5215] was attempted by "./syz-executor exec"[5580] [ 100.634102][ T5409] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.654345][ T5409] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.705232][ T5409] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.755330][ T35] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.807231][ T5409] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.851828][ T5409] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.887019][ T5214] Bluetooth: hci5: command tx timeout [ 100.917215][ T5409] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.958929][ T5474] chnl_net:caif_netlink_parms(): no params data found [ 101.009512][ T5409] hsr_slave_0: entered promiscuous mode [ 101.015992][ T5409] hsr_slave_1: entered promiscuous mode [ 101.028036][ T5409] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 101.037492][ T5409] Cannot create hsr debugfs directory [ 101.187025][ T5295] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 101.212936][ T5474] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.221639][ T5474] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.229220][ T5474] bridge_slave_0: entered allmulticast mode [ 101.256325][ T5474] bridge_slave_0: entered promiscuous mode [ 101.331248][ T5474] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.416901][ T5474] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.424274][ T5474] bridge_slave_1: entered allmulticast mode [ 101.437444][ T5295] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA4, changing to 0x84 [ 101.577555][ T5295] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 101.579871][ T5603] xt_bpf: check failed: parse error [ 101.589539][ T5474] bridge_slave_1: entered promiscuous mode [ 101.624230][ T5295] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 101.929274][ T5295] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.941989][ T35] bridge_slave_1: left allmulticast mode [ 101.955113][ T35] bridge_slave_1: left promiscuous mode [ 101.955760][ T5295] usb 4-1: config 0 descriptor?? [ 101.983064][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.006143][ T35] bridge_slave_0: left allmulticast mode [ 102.017864][ T35] bridge_slave_0: left promiscuous mode [ 102.024923][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.305448][ T5612] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.316170][ T5612] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.562853][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 102.594171][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 102.615562][ T35] bond0 (unregistering): Released all slaves [ 102.763246][ T5474] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.933103][ T5474] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.993835][ T5295] ath6kl: Failed to submit usb control message: -71 [ 103.004002][ T5295] ath6kl: unable to send the bmi data to the device: -71 [ 103.012053][ T5295] ath6kl: Unable to send get target info: -71 [ 103.207475][ T5214] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 103.216398][ T5214] Bluetooth: hci1: Injecting HCI hardware error event [ 103.228223][ T5214] Bluetooth: hci1: hardware error 0x00 [ 103.808421][ T5295] ath6kl: Failed to init ath6kl core: -71 [ 103.838080][ T5295] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 104.245920][ T5295] usb 4-1: USB disconnect, device number 4 [ 104.394317][ T5474] team0: Port device team_slave_0 added [ 104.519224][ T8] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 105.018984][ T5474] team0: Port device team_slave_1 added [ 105.286807][ T8] usb 2-1: Using ep0 maxpacket: 32 [ 105.511619][ T8] usb 2-1: New USB device found, idVendor=a97a, idProduct=5131, bcdDevice=c0.00 [ 105.542033][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.563482][ T8] usb 2-1: Product: syz [ 105.568187][ T8] usb 2-1: Manufacturer: syz [ 105.586565][ T8] usb 2-1: SerialNumber: syz [ 105.612616][ T8] usb 2-1: config 0 descriptor?? [ 105.630399][ T8] usb-storage 2-1:0.0: USB Mass Storage device detected [ 105.643063][ T5474] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.654377][ T5474] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.692883][ T5474] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.719403][ T5474] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.737128][ T5474] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.800926][ T5474] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.931460][ T5645] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 106.346998][ T5214] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 106.664605][ T5258] usb 2-1: USB disconnect, device number 3 [ 106.808348][ T5653] syz.0.82 uses obsolete (PF_INET,SOCK_PACKET) [ 106.828565][ T35] hsr_slave_0: left promiscuous mode [ 106.855297][ T35] hsr_slave_1: left promiscuous mode [ 106.885572][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.905594][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 106.921232][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.937288][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 106.993462][ T35] veth1_macvtap: left promiscuous mode [ 106.999121][ T35] veth0_macvtap: left promiscuous mode [ 107.004939][ T35] veth1_vlan: left promiscuous mode [ 107.010405][ T35] veth0_vlan: left promiscuous mode [ 109.712474][ T35] team0 (unregistering): Port device team_slave_1 removed [ 109.757018][ T8] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 109.794056][ T35] team0 (unregistering): Port device team_slave_0 removed [ 109.960201][ T8] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA4, changing to 0x84 [ 109.976789][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 109.990691][ T8] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 110.008012][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.038037][ T8] usb 4-1: config 0 descriptor?? [ 110.345946][ T5693] kAFS: unparsable volume name [ 110.723408][ T5221] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 110.750913][ T5695] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.837796][ T5695] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.990221][ T5221] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.022117][ T5221] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.036203][ T5221] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 111.077128][ T5221] usb 2-1: New USB device found, idVendor=28bd, idProduct=0055, bcdDevice= 0.00 [ 111.086400][ T5221] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.099598][ T5221] usb 2-1: config 0 descriptor?? [ 111.181100][ T8] ath6kl: Failed to submit usb control message: -110 [ 111.192619][ T8] ath6kl: unable to send the bmi data to the device: -110 [ 111.201693][ T8] ath6kl: Unable to send get target info: -110 [ 111.227147][ T8] ath6kl: Failed to init ath6kl core: -110 [ 111.238620][ T8] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 111.264381][ T5474] hsr_slave_0: entered promiscuous mode [ 111.282695][ T5474] hsr_slave_1: entered promiscuous mode [ 111.290152][ T5474] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 111.298524][ T5474] Cannot create hsr debugfs directory [ 111.313595][ T5692] xt_TCPMSS: Only works on TCP SYN packets [ 111.331136][ T5260] usb 4-1: USB disconnect, device number 5 [ 111.464331][ T5697] netlink: 8 bytes leftover after parsing attributes in process `syz.0.90'. [ 111.517121][ T5697] netlink: 4 bytes leftover after parsing attributes in process `syz.0.90'. [ 112.009067][ T5409] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 112.030994][ T5409] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 112.096798][ T5258] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 112.111055][ T5409] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 112.122485][ T5409] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 112.299619][ T5258] usb 1-1: config 0 interface 0 has no altsetting 0 [ 112.310359][ T5258] usb 1-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 112.321432][ T5258] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.337790][ T5258] usb 1-1: config 0 descriptor?? [ 217.306605][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 217.313718][ C0] rcu: 1-...!: (1 GPs behind) idle=6f34/1/0x4000000000000000 softirq=9915/9919 fqs=3 [ 217.324248][ C0] rcu: (detected by 0, t=10502 jiffies, g=10877, q=276 ncpus=2) [ 217.332106][ C0] Sending NMI from CPU 0 to CPUs 1: [ 217.337350][ C1] NMI backtrace for cpu 1 [ 217.337376][ C1] CPU: 1 UID: 0 PID: 5706 Comm: syz.3.93 Not tainted 6.11.0-rc2-syzkaller-00257-g5189dafa4cf9 #0 [ 217.337394][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 217.337404][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x18/0x70 [ 217.337442][ C1] Code: 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 04 24 65 48 8b 0c 25 00 d7 03 00 65 8b 15 b0 5f 70 7e <81> e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 35 83 b9 1c 16 00 00 [ 217.337457][ C1] RSP: 0018:ffffc90000a18c88 EFLAGS: 00000046 [ 217.337478][ C1] RAX: ffffffff89b46d1e RBX: 17f1005e74000000 RCX: ffff88802b379e00 [ 217.337490][ C1] RDX: 0000000000010404 RSI: 0000000004000000 RDI: 0000000000000000 [ 217.337501][ C1] RBP: ffff88807b01d4c8 R08: ffffffff89b46a93 R09: fffff52000143180 [ 217.337513][ C1] R10: dffffc0000000000 R11: fffff52000143180 R12: dffffc0000000000 [ 217.337525][ C1] R13: ffff88807b01d408 R14: ffff88807b01d400 R15: ffff888023cec340 [ 217.337538][ C1] FS: 00007f05d1eb36c0(0000) GS:ffff8880b9300000(0000) knlGS:0000000000000000 [ 217.337552][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 217.337563][ C1] CR2: 0000000020002c40 CR3: 000000005b53a000 CR4: 00000000003526f0 [ 217.337577][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 217.337586][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 217.337596][ C1] Call Trace: [ 217.337605][ C1] [ 217.337614][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 217.337637][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 217.337661][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 217.337677][ C1] ? nmi_handle+0x2a/0x5a0 [ 217.337701][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 217.337720][ C1] ? nmi_handle+0x14f/0x5a0 [ 217.337735][ C1] ? nmi_handle+0x2a/0x5a0 [ 217.337751][ C1] ? __sanitizer_cov_trace_pc+0x18/0x70 [ 217.337772][ C1] ? default_do_nmi+0x63/0x160 [ 217.337792][ C1] ? exc_nmi+0x123/0x1f0 [ 217.337809][ C1] ? end_repeat_nmi+0xf/0x53 [ 217.337829][ C1] ? advance_sched+0x583/0xca0 [ 217.337845][ C1] ? advance_sched+0x80e/0xca0 [ 217.337862][ C1] ? __sanitizer_cov_trace_pc+0x18/0x70 [ 217.337884][ C1] ? __sanitizer_cov_trace_pc+0x18/0x70 [ 217.337905][ C1] ? __sanitizer_cov_trace_pc+0x18/0x70 [ 217.337926][ C1] [ 217.337932][ C1] [ 217.337937][ C1] advance_sched+0x80e/0xca0 [ 217.337962][ C1] ? __pfx_advance_sched+0x10/0x10 [ 217.337978][ C1] __hrtimer_run_queues+0x59b/0xd50 [ 217.337996][ C1] ? ktime_get_update_offsets_now+0x3c/0x250 [ 217.338027][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 217.338044][ C1] ? ktime_get_update_offsets_now+0x22d/0x250 [ 217.338069][ C1] hrtimer_interrupt+0x396/0x990 [ 217.338099][ C1] __sysvec_apic_timer_interrupt+0x110/0x3f0 [ 217.338125][ C1] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 217.338148][ C1] [ 217.338153][ C1] [ 217.338159][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 217.338177][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0xd8/0x140 [ 217.338199][ C1] Code: 9c 8f 44 24 20 42 80 3c 23 00 74 08 4c 89 f7 e8 ce 16 40 f6 f6 44 24 21 02 75 52 41 f7 c7 00 02 00 00 74 01 fb bf 01 00 00 00 83 6e ab f5 65 8b 05 f4 55 4c 74 85 c0 74 43 48 c7 04 24 0e 36 [ 217.338217][ C1] RSP: 0018:ffffc90003d5e5e0 EFLAGS: 00000206 [ 217.338230][ C1] RAX: a8d3fc1bcadd7100 RBX: 1ffff920007abcc0 RCX: ffffffff81702e4a [ 217.338242][ C1] RDX: dffffc0000000000 RSI: ffffffff8bead560 RDI: 0000000000000001 [ 217.338253][ C1] RBP: ffffc90003d5e670 R08: ffffffff934ef947 R09: 1ffffffff269df28 [ 217.338265][ C1] R10: dffffc0000000000 R11: fffffbfff269df29 R12: dffffc0000000000 [ 217.338277][ C1] R13: 1ffff920007abcbc R14: ffffc90003d5e600 R15: 0000000000000246 [ 217.338293][ C1] ? mark_lock+0x9a/0x350 [ 217.338319][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 217.338339][ C1] ? stack_trace_save+0x118/0x1d0 [ 217.338363][ C1] stack_depot_save_flags+0x6e4/0x830 [ 217.338386][ C1] save_stack+0x109/0x1f0 [ 217.338407][ C1] ? __pfx_save_stack+0x10/0x10 [ 217.338425][ C1] ? post_alloc_hook+0x1f3/0x230 [ 217.338439][ C1] ? get_page_from_freelist+0x2e4c/0x2f10 [ 217.338457][ C1] ? __alloc_pages_noprof+0x256/0x6c0 [ 217.338474][ C1] ? ___kmalloc_large_node+0x8b/0x1d0 [ 217.338494][ C1] ? __kmalloc_large_noprof+0x1f/0x80 [ 217.338514][ C1] ? update_or_create_fnhe+0x1ca/0x16e0 [ 217.338536][ C1] ? __ip_rt_update_pmtu+0x790/0xa50 [ 217.338554][ C1] ? ipv4_sk_update_pmtu+0x1002/0x1d20 [ 217.338573][ C1] ? raw_icmp_error+0x638/0xdc0 [ 217.338591][ C1] ? icmp_socket_deliver+0xee/0x330 [ 217.338606][ C1] ? icmp_unreach+0x5a0/0x9a0 [ 217.338621][ C1] ? icmp_rcv+0xba0/0x1100 [ 217.338635][ C1] ? ip_protocol_deliver_rcu+0x2e6/0x440 [ 217.338651][ C1] ? ip_local_deliver_finish+0x341/0x5f0 [ 217.338668][ C1] ? NF_HOOK+0x3a4/0x450 [ 217.338683][ C1] ? NF_HOOK+0x3a4/0x450 [ 217.338704][ C1] __set_page_owner+0x92/0x800 [ 217.338725][ C1] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 217.338749][ C1] ? __pfx_lock_release+0x10/0x10 [ 217.338771][ C1] ? __pfx___set_page_owner+0x10/0x10 [ 217.338789][ C1] ? do_raw_spin_trylock+0xc8/0x1f0 [ 217.338812][ C1] post_alloc_hook+0x1f3/0x230 [ 217.338830][ C1] get_page_from_freelist+0x2e4c/0x2f10 [ 217.338852][ C1] ? lockdep_unlock+0x16a/0x300 [ 217.338879][ C1] ? mark_lock+0x2a4/0x350 [ 217.338908][ C1] ? prepare_alloc_pages+0x369/0x5d0 [ 217.338930][ C1] __alloc_pages_noprof+0x256/0x6c0 [ 217.338951][ C1] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 217.338975][ C1] ? do_raw_spin_lock+0x14f/0x370 [ 217.338992][ C1] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 217.339016][ C1] ___kmalloc_large_node+0x8b/0x1d0 [ 217.339040][ C1] __kmalloc_large_noprof+0x1f/0x80 [ 217.339062][ C1] update_or_create_fnhe+0x1ca/0x16e0 [ 217.339090][ C1] ? __pfx_update_or_create_fnhe+0x10/0x10 [ 217.339111][ C1] ? fib_lookup+0x81/0x450 [ 217.339131][ C1] ? fib_select_path+0x1eb/0x440 [ 217.339146][ C1] ? fib_lookup+0x36c/0x450 [ 217.339167][ C1] __ip_rt_update_pmtu+0x790/0xa50 [ 217.339186][ C1] ? __ip_rt_update_pmtu+0x5d7/0xa50 [ 217.339216][ C1] ? __pfx___ip_rt_update_pmtu+0x10/0x10 [ 217.339245][ C1] ipv4_sk_update_pmtu+0x1002/0x1d20 [ 217.339267][ C1] ? ipv4_sk_update_pmtu+0x16e/0x1d20 [ 217.339290][ C1] ? __pfx_ipv4_sk_update_pmtu+0x10/0x10 [ 217.339311][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 217.339339][ C1] ? raw_local_deliver+0x327/0xf20 [ 217.339357][ C1] ? __pfx_lock_release+0x10/0x10 [ 217.339382][ C1] raw_icmp_error+0x638/0xdc0 [ 217.339402][ C1] ? raw_icmp_error+0x187/0xdc0 [ 217.339424][ C1] icmp_socket_deliver+0xee/0x330 [ 217.339443][ C1] icmp_unreach+0x5a0/0x9a0 [ 217.339463][ C1] icmp_rcv+0xba0/0x1100 [ 217.339550][ C1] ? __pfx_icmp_rcv+0x10/0x10 [ 217.339566][ C1] ? __pfx_tcp_v4_rcv+0x10/0x10 [ 217.339583][ C1] ip_protocol_deliver_rcu+0x2e6/0x440 [ 217.339603][ C1] ? ip_local_deliver_finish+0x230/0x5f0 [ 217.339621][ C1] ip_local_deliver_finish+0x341/0x5f0 [ 217.339642][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 217.339660][ C1] NF_HOOK+0x3a4/0x450 [ 217.339679][ C1] ? NF_HOOK+0x9a/0x450 [ 217.339694][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 217.339712][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 217.339733][ C1] ? ip_rcv_finish+0x406/0x560 [ 217.339752][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 217.339768][ C1] NF_HOOK+0x3a4/0x450 [ 217.339787][ C1] ? NF_HOOK+0x9a/0x450 [ 217.339802][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 217.339817][ C1] ? ip_rcv_core+0x801/0xd10 [ 217.339835][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 217.339856][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 217.339873][ C1] __netif_receive_skb+0x2bf/0x650 [ 217.339897][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 217.339917][ C1] ? seqcount_lockdep_reader_access+0x1d7/0x220 [ 217.339938][ C1] ? __pfx___netif_receive_skb+0x10/0x10 [ 217.339958][ C1] ? __kasan_slab_alloc+0x66/0x80 [ 217.339977][ C1] ? read_tsc+0x9/0x20 [ 217.339996][ C1] ? timekeeping_get_ns+0x2c0/0x420 [ 217.340021][ C1] ? netif_receive_skb+0x131/0x890 [ 217.340041][ C1] ? netif_receive_skb+0x131/0x890 [ 217.340062][ C1] netif_receive_skb+0x1e8/0x890 [ 217.340083][ C1] ? tun_rx_batched+0x160/0x8f0 [ 217.340106][ C1] ? __pfx_netif_receive_skb+0x10/0x10 [ 217.340140][ C1] ? tun_rx_batched+0x160/0x8f0 [ 217.340158][ C1] tun_rx_batched+0x1b7/0x8f0 [ 217.340178][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 217.340202][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 217.340223][ C1] ? __pfx_tun_rx_batched+0x10/0x10 [ 217.340252][ C1] tun_get_user+0x2f84/0x4720 [ 217.340271][ C1] ? tun_get_user+0x2a78/0x4720 [ 217.340296][ C1] ? __lock_acquire+0x137a/0x2040 [ 217.340322][ C1] ? __pfx_tun_get_user+0x10/0x10 [ 217.340351][ C1] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 217.340370][ C1] ? tun_get+0x1e/0x2f0 [ 217.340388][ C1] ? __pfx_lock_release+0x10/0x10 [ 217.340419][ C1] ? tun_get+0x1e/0x2f0 [ 217.340436][ C1] ? tun_get+0x27d/0x2f0 [ 217.340455][ C1] tun_chr_write_iter+0x113/0x1f0 [ 217.340476][ C1] vfs_write+0xa72/0xc90 [ 217.340494][ C1] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 217.340513][ C1] ? __pfx_vfs_write+0x10/0x10 [ 217.340527][ C1] ? do_futex+0x392/0x560 [ 217.340559][ C1] ksys_write+0x1a0/0x2c0 [ 217.340578][ C1] ? __pfx_ksys_write+0x10/0x10 [ 217.340594][ C1] ? do_syscall_64+0x100/0x230 [ 217.340611][ C1] ? do_syscall_64+0xb6/0x230 [ 217.340628][ C1] do_syscall_64+0xf3/0x230 [ 217.340644][ C1] ? clear_bhb_loop+0x35/0x90 [ 217.340664][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.340681][ C1] RIP: 0033:0x7f05d11764df [ 217.340714][ C1] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8d 02 00 48 [ 217.340728][ C1] RSP: 002b:00007f05d1eb3000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 217.340747][ C1] RAX: ffffffffffffffda RBX: 00007f05d1305f80 RCX: 00007f05d11764df [ 217.340761][ C1] RDX: 000000000000009a RSI: 0000000020000440 RDI: 00000000000000c8 [ 217.340772][ C1] RBP: 00007f05d11e58ee R08: 0000000000000000 R09: 0000000000000000 [ 217.340782][ C1] R10: 000000000000009a R11: 0000000000000293 R12: 0000000000000000 [ 217.340792][ C1] R13: 0000000000000000 R14: 00007f05d1305f80 R15: 00007ffe0d1730d8 [ 217.340813][ C1] [ 217.341339][ C0] rcu: rcu_preempt kthread starved for 10496 jiffies! g10877 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 218.365312][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 218.375308][ C0] rcu: RCU grace-period kthread stack dump: [ 218.381211][ C0] task:rcu_preempt state:R running task stack:25816 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 218.393063][ C0] Call Trace: [ 218.396372][ C0] [ 218.399327][ C0] __schedule+0x17ae/0x4a10 [ 218.403882][ C0] ? __pfx___schedule+0x10/0x10 [ 218.408759][ C0] ? __pfx_lock_release+0x10/0x10 [ 218.413799][ C0] ? __asan_memset+0x23/0x50 [ 218.418402][ C0] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 218.424220][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 218.430594][ C0] ? schedule+0x90/0x320 [ 218.434848][ C0] schedule+0x14b/0x320 [ 218.439028][ C0] schedule_timeout+0x1be/0x310 [ 218.443893][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 218.449280][ C0] ? __pfx_process_timeout+0x10/0x10 [ 218.454840][ C0] ? prepare_to_swait_event+0x32e/0x350 [ 218.460403][ C0] rcu_gp_fqs_loop+0x2df/0x1330 [ 218.465264][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 218.470485][ C0] ? __pfx_rcu_implicit_dynticks_qs+0x10/0x10 [ 218.476647][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 218.481942][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 218.487854][ C0] ? finish_swait+0xd4/0x1e0 [ 218.492459][ C0] rcu_gp_kthread+0xa7/0x3b0 [ 218.497063][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 218.502264][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 218.508170][ C0] ? __kthread_parkme+0x169/0x1d0 [ 218.513209][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 218.518418][ C0] kthread+0x2f0/0x390 [ 218.522501][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 218.527707][ C0] ? __pfx_kthread+0x10/0x10 [ 218.532312][ C0] ret_from_fork+0x4b/0x80 [ 218.537458][ C0] ? __pfx_kthread+0x10/0x10 [ 218.542085][ C0] ret_from_fork_asm+0x1a/0x30 [ 218.546906][ C0] [ 218.549933][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 218.556359][ C0] CPU: 0 UID: 0 PID: 52 Comm: kworker/u8:3 Not tainted 6.11.0-rc2-syzkaller-00257-g5189dafa4cf9 #0 [ 218.567074][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 218.577233][ C0] Workqueue: events_unbound toggle_allocation_gate [ 218.583782][ C0] RIP: 0010:smp_call_function_many_cond+0x1860/0x29d0 [ 218.590584][ C0] Code: 45 8b 65 00 44 89 e6 83 e6 01 31 ff e8 79 14 0c 00 41 83 e4 01 49 bc 00 00 00 00 00 fc ff df 75 07 e8 24 10 0c 00 eb 38 f3 90 <42> 0f b6 04 23 84 c0 75 11 41 f7 45 00 01 00 00 00 74 1e e8 08 10 [ 218.612755][ C0] RSP: 0018:ffffc90000bc7700 EFLAGS: 00000293 [ 218.619022][ C0] RAX: ffffffff81876738 RBX: 1ffff110172688f1 RCX: ffff888015fc8000 [ 218.627260][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 218.635406][ C0] RBP: ffffc90000bc78e0 R08: ffffffff81876707 R09: 1ffffffff269df00 [ 218.643387][ C0] R10: dffffc0000000000 R11: fffffbfff269df01 R12: dffffc0000000000 [ 218.651367][ C0] R13: ffff8880b9344788 R14: ffff8880b923fb40 R15: 0000000000000001 [ 218.659431][ C0] FS: 0000000000000000(0000) GS:ffff8880b9200000(0000) knlGS:0000000000000000 [ 218.668374][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 218.674961][ C0] CR2: 000055557e618808 CR3: 000000000e534000 CR4: 00000000003526f0 [ 218.682940][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 218.690912][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 218.699735][ C0] Call Trace: [ 218.703049][ C0] [ 218.705908][ C0] ? rcu_check_gp_kthread_starvation+0x278/0x310 [ 218.712354][ C0] ? print_other_cpu_stall+0x1470/0x15a0 [ 218.718042][ C0] ? __pfx_print_other_cpu_stall+0x10/0x10 [ 218.723892][ C0] ? __pfx_lock_release+0x10/0x10 [ 218.728943][ C0] ? kvm_check_and_clear_guest_paused+0x6a/0xd0 [ 218.735283][ C0] ? rcu_sched_clock_irq+0xa2c/0x10d0 [ 218.740691][ C0] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 218.746336][ C0] ? hrtimer_run_queues+0x16c/0x460 [ 218.751649][ C0] ? acct_account_cputime+0x207/0x210 [ 218.757034][ C0] ? update_process_times+0x1ce/0x230 [ 218.762423][ C0] ? tick_nohz_handler+0x37c/0x500 [ 218.767716][ C0] ? __pfx_tick_nohz_handler+0x10/0x10 [ 218.773183][ C0] ? __hrtimer_run_queues+0x551/0xd50 [ 218.778567][ C0] ? ktime_get_update_offsets_now+0x3c/0x250 [ 218.784576][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 218.790298][ C0] ? ktime_get_update_offsets_now+0x22d/0x250 [ 218.796383][ C0] ? hrtimer_interrupt+0x396/0x990 [ 218.801519][ C0] ? __sysvec_apic_timer_interrupt+0x110/0x3f0 [ 218.807690][ C0] ? sysvec_apic_timer_interrupt+0xa1/0xc0 [ 218.813507][ C0] [ 218.816436][ C0] [ 218.819367][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 218.825533][ C0] ? smp_call_function_many_cond+0x1847/0x29d0 [ 218.831691][ C0] ? smp_call_function_many_cond+0x1878/0x29d0 [ 218.837852][ C0] ? smp_call_function_many_cond+0x1860/0x29d0 [ 218.844385][ C0] ? kmem_cache_alloc_bulk_noprof+0x146/0x790 [ 218.850489][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 218.855546][ C0] ? kmem_cache_alloc_bulk_noprof+0x146/0x790 [ 218.861676][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 218.868032][ C0] ? __pfx___might_resched+0x10/0x10 [ 218.873357][ C0] ? __mutex_trylock_common+0x183/0x2e0 [ 218.878965][ C0] ? __pfx___might_resched+0x10/0x10 [ 218.884393][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 218.889555][ C0] on_each_cpu_cond_mask+0x3f/0x80 [ 218.894782][ C0] text_poke_bp_batch+0x352/0xb30 [ 218.899917][ C0] ? __pfx_text_poke_bp_batch+0x10/0x10 [ 218.905475][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 218.910604][ C0] ? arch_jump_label_transform_queue+0x9b/0x100 [ 218.916952][ C0] text_poke_finish+0x30/0x50 [ 218.921732][ C0] arch_jump_label_transform_apply+0x1c/0x30 [ 218.927751][ C0] static_key_enable_cpuslocked+0x136/0x260 [ 218.933663][ C0] static_key_enable+0x1a/0x20 [ 218.938439][ C0] toggle_allocation_gate+0xb5/0x250 [ 218.943740][ C0] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 218.949644][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 218.956089][ C0] ? process_scheduled_works+0x945/0x1830 [ 218.961819][ C0] process_scheduled_works+0xa2c/0x1830 [ 218.967491][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 218.973663][ C0] ? assign_work+0x364/0x3d0 [ 218.978361][ C0] worker_thread+0x86d/0xd40 [ 218.982981][ C0] ? __kthread_parkme+0x169/0x1d0 [ 218.988022][ C0] ? __pfx_worker_thread+0x10/0x10 [ 218.993153][ C0] kthread+0x2f0/0x390 [ 218.997235][ C0] ? __pfx_worker_thread+0x10/0x10 [ 219.002355][ C0] ? __pfx_kthread+0x10/0x10 [ 219.006959][ C0] ret_from_fork+0x4b/0x80 [ 219.011389][ C0] ? __pfx_kthread+0x10/0x10 [ 219.016075][ C0] ret_from_fork_asm+0x1a/0x30 [ 219.020893][ C0]