last executing test programs: 28.083386451s ago: executing program 5 (id=23): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x8d0) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @multicast2}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)='\b', 0x1}, {&(0x7f0000000180)="2d0000008058", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000b00000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000000) 27.792352507s ago: executing program 5 (id=27): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x100008b}, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f0000001640)=0xc, 0x45) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(0xffffffffffffffff) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x5ff, 0x2000) 26.002323234s ago: executing program 5 (id=29): syz_emit_ethernet(0x42, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) r3 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r3, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x39}, @in6=@loopback, 0x4e21, 0x0, 0x4e20, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x3}, {0x2000001000000000}, 0x0, 0x6e6bb9, 0x1}, {{@in=@broadcast, 0xfffffffc, 0x33}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0x7}}, 0xe8) ftruncate(r3, 0x51a9493) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0xf) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000040)=0x32) sched_setaffinity(0x0, 0x0, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x200000000000011, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) unshare(0x62040200) 24.443522703s ago: executing program 5 (id=31): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x20040) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000200)=""/209, 0xd1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x31d, @tick=0xfffffffc}) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r1, 0x80045300, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) tkill(r0, 0x7) io_uring_setup(0x1de7, &(0x7f0000000100)={0x0, 0x0, 0x800, 0x3, 0x8}) 24.013851847s ago: executing program 5 (id=33): mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$9p_virtio(&(0x7f00000001c0), 0x0, 0x0, 0x2, 0x0) chdir(&(0x7f0000000140)='./file0\x00') preadv(0xffffffffffffffff, &(0x7f0000002480), 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x1) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) semctl$IPC_STAT(0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r1) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x2, 0x1}, 0x20) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) write$cgroup_int(r0, &(0x7f0000000540), 0xfffffdd8) 19.830915452s ago: executing program 5 (id=40): syz_emit_ethernet(0x42, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$key(0xf, 0x3, 0x2) r2 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r2, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x39}, @in6=@loopback, 0x4e21, 0x0, 0x4e20, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x3}, {0x2000001000000000}, 0x0, 0x6e6bb9, 0x1}, {{@in=@broadcast, 0xfffffffc, 0x33}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0x7}}, 0xe8) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0xf) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000040)=0x32) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x200000000000011, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) unshare(0x62040200) 17.87536549s ago: executing program 1 (id=44): r0 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d240701060000fd80000000e80924030000000001"], 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x407}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000001840)={0x14, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b40)={0x44, &(0x7f0000000440)={0x40, 0x1, 0x2, "b7e0"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000fc0)={0x84, &(0x7f0000000a40)={0x20, 0x16, 0x2, "e83f"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 16.721404975s ago: executing program 0 (id=45): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x100008b}, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r2) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) 14.448514062s ago: executing program 0 (id=48): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) getpid() symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00') bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x24000044, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x27}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, 0x0, 0x0}, 0x20) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) add_key$keyring(0x0, &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) 14.390067386s ago: executing program 1 (id=49): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14) socket$inet6_mptcp(0xa, 0x1, 0x106) io_setup(0x3, &(0x7f0000000180)) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) r2 = socket$inet(0xa, 0x801, 0x84) listen(r2, 0x8) r3 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r3, 0x47bc, 0x0, 0x0, 0x0, 0x0) sendmsg$kcm(r0, 0x0, 0x0) 11.48686482s ago: executing program 0 (id=54): bpf$TOKEN_CREATE(0x24, &(0x7f0000000140), 0x8) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x303}, "e3da62162895237d", "5e1cdd4a00000000000000000000000000008000", "a98ae4df", "cd5019dfdf2f702b"}, 0x38) sendto$inet6(r0, &(0x7f0000000480)='&', 0x1, 0x0, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="240000001800090000080000000000001c140000fe00000100000000080013"], 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000380)=@gcm_256={{0x304}, "480ca6eda49ed6a6", "3a2cc8b276a753b0e23e2a8436b0e1d53d11b70c57abe2e932240e766d3aebfd", '\x00\x00\t\x00', "e96e232f2004a832"}, 0x38) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000680)=ANY=[@ANYBLOB="50000000bbe1a66b15c7dc1dea0ce47a4a2e21627e63c9fe529e", @ANYRES64=r0, @ANYBLOB="0101000000000000005f74756e00000000000000000024000280040001001c00038022b117fae48b7b2183e459af0b1929ac4c5ba7a3f42d2a1e61d178e3748a2e0e799315d6d9c743eef889b14337157a48b8aadb7f71c5ffd945b4b1fd9ed7b9b4baedf182ef6074726c486096029c250b1346cf4e77e0fd7bfa2b295071b8e2f058fd3325ead326e0bd0549a591b63e9e875650289c5961283a83b8f5fa9fdb88520e4673fa0a1e9f4780bb5b83d4a1db0310ff78793897dbc2c3e820929ec57db35944cf5255d840ed9fae6d081110ac9db50de83be354aca1"], 0x50}, 0x1, 0x0, 0x0, 0x20000040}, 0x40000) splice(r0, 0x0, r2, 0x0, 0xffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x7, 0x1f, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, r2, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r4, 0x0, 0x8000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x304, 0x36}, "1a88ef816c4b42ed", "a5fdeb69a751e94df50ad7e9fb434d1665e9298b01e49419567b443803cf578f", "6d02cd81", "066580001e00"}, 0x38) setsockopt$inet6_tcp_int(r5, 0x11a, 0x4, &(0x7f0000000080), 0x4) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, 0x0, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r3) 9.945243536s ago: executing program 3 (id=55): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 9.664817041s ago: executing program 0 (id=57): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000a00)) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x609, 0x4, 0x0, &(0x7f0000000140)="dd800000", 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000500)={{r2}, &(0x7f0000000380), &(0x7f00000004c0)='%pS \x00'}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) epoll_create1(0x0) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000380)={0xa, 0x14e24, 0x0, @empty}, 0x1c) recvmmsg(r5, &(0x7f0000005dc0)=[{{0x0, 0x0, 0x0}}], 0x4000000000002b1, 0x0, 0x0) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e24, 0x0, @empty}, 0x1c) sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000680)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x200020000a84, 0xffffffffffffffff, 0x70000002, 0x200002b0, 0x200000200002e0, 0x3], 0x2, 0x0, &(0x7f0000000e40)=ANY=[@ANYRESHEX=r1, @ANYRES64=r3, @ANYBLOB="7e064b47af15a5cbdd4462a408023b2999022bd525f59335a95c7ad08c5d86a42a6a5b8ef6a1275e57ea8381eed4735d284cbb612346a93e46403f494b54f95acd3b91448758f5554c468550bef0e9bd5bff79da70da0ff08f5bc20d9d45844a983fddd7bceb55c4464409a3c10fee019d793acf336138da3ffbfac21dc25e4cfebe5bf3c1609af19aa99ebc2d1115"]}, 0x121) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={&(0x7f00000000c0)="877b03b2623c41b2a5bfae76eaa8e54ea793f086513aca", &(0x7f0000000880)=""/191, &(0x7f0000000700)="180708723835c625545f5130a5070fb0a11d4a13f4feabcc624b311029fb8a09e82c388d244991d73b8cd8606e342ff92b8631c3160d8d67167c2eacd6896c4354aea0e7e7d4965250555ec895376cee2f83962b313404ecb859c866f64e1464c4854499d7d5707d8111", &(0x7f0000000280)="1ab2c7ba75340283ce22c30dd6f0117462eb191a33dd5a47572baab45e8884702df5a77b3bbee79f97420f02ea", 0x1, r2}, 0x38) socket$netlink(0x10, 0x3, 0xe) preadv(r1, &(0x7f0000000080)=[{&(0x7f0000000100)=""/113, 0x71}], 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f000000000000000000000000000039d1c723d667ee8b42bce1f54f75594182"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x11, 0x20000110, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r7}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x2, 0xb, &(0x7f0000000980)=@framed={{}, [@map_val={0x18, 0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x181}, @alu={0x4, 0x0, 0x7, 0x5, 0xb, 0xfffffffffffffffe, 0x8}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x5}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x7}, @alu={0x4, 0x1, 0x5, 0x4, 0xa, 0x6, 0x4}]}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) 9.656442375s ago: executing program 4 (id=58): symlink(&(0x7f0000000540)='./file0/file0\x00', &(0x7f0000000400)='./file0\x00') syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) syz_open_procfs(0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x80, 0x10e) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e20, @broadcast}, 0x10) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f000041c000/0x2000)=nil, 0x2000, 0x8) openat$ppp(0xffffffffffffff9c, 0x0, 0x2c2000, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240), 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121000, 0x0) ioctl$TIOCVHANGUP(r2, 0x5437, 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x8000000003c) socket$igmp6(0xa, 0x3, 0x2) 9.582428785s ago: executing program 1 (id=59): unshare(0x8000400) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000200)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000140)={0x1f, 0xf6, @none, 0x0, 0x2}, 0xe) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xff, 0x485, &(0x7f0000001040)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES64=r0, @ANYRES32, @ANYRES8], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) r2 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000080)=0xfffffffffbfffffe) connect$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) ppoll(&(0x7f0000000640)=[{0xffffffffffffffff, 0x8b27b48220d0f67f}, {0xffffffffffffffff, 0x200}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0xc282}, {r2, 0x4090}], 0x5, 0x0, 0x0, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000940)={{}, 'syz0\x00', 0x40}) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x12) socket$inet6(0xa, 0x6, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x7ffe, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000087}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000140)=0x2) sendfile(0xffffffffffffffff, r4, 0x0, 0x20000023896) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) listen(r1, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000380)={@local, @random="c4bc9cac9686", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xe2}}}}}}}, 0x0) 9.533327434s ago: executing program 3 (id=60): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r2}, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r3}, 0x18) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000240)=ANY=[@ANYBLOB="879909c13f30bedb692b9e5a9b0fc27c41e7f0eb326c2cd0474fe50bc396f4e96e7521bb0294761563c8cc085d8b3a6464ed709951c00229db24b9", @ANYRES16=r5, @ANYBLOB="ffff2abd7000fcdbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x400c9}, 0x20000000) socket$inet6(0xa, 0x80002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x3, 0x261, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000540)={r6, &(0x7f0000000400)="c7", &(0x7f0000000380)=@tcp6}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{r6}, &(0x7f0000000d00), &(0x7f00000003c0)='%pS \x00'}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f00000000c0)={r6, &(0x7f00000001c0), 0x0}, 0x20) 9.516771532s ago: executing program 2 (id=61): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x100008b}, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r2) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) 8.319917208s ago: executing program 3 (id=62): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x348, 0x0, 0xc8, 0x8, 0x1b0, 0x5803, 0x278, 0x2e8, 0x2e8, 0x278, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x190, 0x1b0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5df11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f35a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x4}}, @inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@mcast2, @empty, [], [], 'nicvf0\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a8) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f00001e7000/0x2000)=nil, 0x2000, 0x8003, &(0x7f0000000000)=0x9, 0x3, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) read$FUSE(r2, &(0x7f00000007c0)={0x2020}, 0x2020) 8.299752409s ago: executing program 4 (id=63): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000480), 0x80000, 0x0) r0 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) socket(0x10, 0x2, 0x0) io_uring_enter(r0, 0x48e9, 0x0, 0x2, 0x0, 0x0) 6.552525506s ago: executing program 4 (id=64): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x8000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@nfc={0x27, 0x0, 0x0, 0x5}, 0x80) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000780)={'syz0\x00', {0xfffc, 0x2, 0x3, 0x5}, 0x2f, [0x1, 0x7fffffff, 0x5, 0x7, 0x4, 0x23acad72, 0x9c1f, 0x7ff, 0x80000000, 0x0, 0x8000, 0x7fff, 0x9, 0x3, 0x2bfa, 0x0, 0x9, 0x6, 0xa5, 0x4, 0x7, 0x5, 0x6, 0xd491, 0x1, 0x6, 0x4, 0x7e, 0x2db192cb, 0x8, 0x4d52d84b, 0x8, 0x8000, 0xc, 0x1000, 0x9, 0x6, 0x1000, 0x8, 0x4, 0x5, 0x0, 0x800, 0x2, 0x3, 0x2, 0x6, 0x4, 0x8, 0x7f, 0xffffffc0, 0x8, 0xff, 0x7fffffff, 0x7ff, 0x7, 0x1, 0x5, 0xa, 0x4, 0x2, 0x4, 0x10000, 0x7], [0x7, 0xfffff7d2, 0x2, 0x1786, 0x5, 0x8e4, 0x0, 0x9, 0xed, 0x40, 0x458, 0x6, 0x2, 0x2, 0x3ff, 0x17894c81, 0x7, 0x8, 0x3, 0x98, 0x5, 0x8, 0xc1e, 0xcd9af0f, 0x4, 0x8, 0x945, 0x6, 0x400, 0x9, 0x73e, 0xaa6a, 0x44, 0x659, 0x4, 0x5, 0x53a, 0x4, 0x3, 0xde90, 0x11, 0x4, 0xfffffff9, 0x0, 0x3, 0x7, 0xffff, 0x8, 0x400, 0x7, 0x80000000, 0x2aea, 0x3, 0x2, 0x0, 0x9, 0x8, 0x9, 0x6, 0x11, 0x6, 0x4, 0x5, 0x9], [0xe, 0x4, 0x5, 0x800, 0xcd, 0x2, 0x6, 0x7, 0x4, 0x101, 0xb342, 0x1, 0x3, 0x4, 0x200, 0x9, 0x4, 0x4, 0x2, 0xfffffff1, 0x0, 0x9, 0xffff, 0xabe, 0x17, 0x133, 0x6, 0x4d, 0x40, 0x2, 0x0, 0x3ff, 0x134000, 0x2, 0x1, 0x4, 0x47, 0x3, 0xe01c, 0x2, 0x6, 0x7, 0x1, 0x2, 0x8, 0x9, 0x8, 0x239, 0xe88, 0xfffffffd, 0x375d, 0x8, 0x40, 0xefc, 0x7, 0x100, 0x2, 0x5, 0x2, 0x800, 0x1, 0x9, 0x200, 0xe44], [0x800, 0xfffffcb5, 0x3, 0x1, 0x1, 0x19c1, 0x40, 0x8, 0x2, 0x0, 0xf, 0x3, 0x1000, 0x4, 0x3, 0x4, 0x3, 0x2, 0x1, 0x2, 0x2, 0x3ff, 0xf, 0x2, 0x6, 0x124, 0x7f, 0x5, 0x3, 0x0, 0x1, 0x4, 0x401, 0x4, 0x80000000, 0xbc2f8d8, 0x5, 0xff, 0x1d2b2a0a, 0x4, 0x4, 0xffff, 0x28, 0xa22, 0x200, 0x2, 0x0, 0x8, 0x767, 0x6, 0x1, 0x8, 0x7dc, 0x0, 0xed7, 0x5c59, 0xff, 0x7, 0x2, 0x69ba, 0x92, 0x3, 0x1, 0x722]}, 0x45c) sendfile(r2, r1, &(0x7f0000002080)=0x3a, 0x23b) 6.364936149s ago: executing program 2 (id=65): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r1}, 0x10) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeea, 0x8031, 0xffffffffffffffff, 0xbce03000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x801, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x62211}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x24000030) r7 = gettid() process_vm_writev(r7, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000), 0x0, 0x0) 4.304525562s ago: executing program 32 (id=40): syz_emit_ethernet(0x42, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$key(0xf, 0x3, 0x2) r2 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r2, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x39}, @in6=@loopback, 0x4e21, 0x0, 0x4e20, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x3}, {0x2000001000000000}, 0x0, 0x6e6bb9, 0x1}, {{@in=@broadcast, 0xfffffffc, 0x33}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0x7}}, 0xe8) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0xf) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000040)=0x32) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x200000000000011, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) unshare(0x62040200) 4.299580125s ago: executing program 1 (id=67): bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0xe) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000140)={0x1f, 0xf6, @none, 0x0, 0x2}, 0xe) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xff, 0x485, &(0x7f0000001040)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES64, @ANYRES32=r0, @ANYRES8=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) r2 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000080)=0xfffffffffbfffffe) connect$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) ppoll(&(0x7f0000000640)=[{0xffffffffffffffff, 0x8b27b48220d0f67f}, {0xffffffffffffffff, 0x200}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0xc282}, {r2, 0x4090}], 0x5, 0x0, 0x0, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000940)={{}, 'syz0\x00', 0x40}) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x12) socket$inet6(0xa, 0x6, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x7ffe, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000087}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r5, 0x40045532, &(0x7f0000000140)=0x2) sendfile(r4, r5, 0x0, 0x20000023896) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) listen(r1, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000380)={@local, @random="c4bc9cac9686", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xe2}}}}}}}, 0x0) 4.296999489s ago: executing program 3 (id=68): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x7, 0x6, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socketpair$unix(0x1, 0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000008500000005", @ANYRES32=r1, @ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x103, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x6b, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r5}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="090000000000000022000600000008000300", @ANYRES32=r8, @ANYBLOB="0800050002000000"], 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$NL80211_CMD_CONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x34, 0x0, 0x5, 0xffffffff, 0x8, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random="8b"}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}], @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x27}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x0, 0x0, {0x0, 0x0, 0x0, r9}}, 0x24}}, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000014c0)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4adf7", 0x28, 0x2c, 0x0, @rand_addr=' \x01\x00', @mcast2, {[@hopopts={0x3c, 0x2, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}]}], @echo_reply}}}}}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r10, &(0x7f0000000040)='pids.events\x00', 0x275a, 0x0) 3.455995079s ago: executing program 2 (id=69): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x8000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@nfc={0x27, 0x0, 0x0, 0x5}, 0x80) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000780)={'syz0\x00', {0xfffc, 0x2, 0x3, 0x5}, 0x2f, [0x1, 0x7fffffff, 0x5, 0x7, 0x4, 0x23acad72, 0x9c1f, 0x7ff, 0x80000000, 0x0, 0x8000, 0x7fff, 0x9, 0x3, 0x2bfa, 0x0, 0x9, 0x6, 0xa5, 0x4, 0x7, 0x5, 0x6, 0xd491, 0x1, 0x6, 0x4, 0x7e, 0x2db192cb, 0x8, 0x4d52d84b, 0x8, 0x8000, 0xc, 0x1000, 0x9, 0x6, 0x1000, 0x8, 0x4, 0x5, 0x0, 0x800, 0x2, 0x3, 0x2, 0x6, 0x4, 0x8, 0x7f, 0xffffffc0, 0x8, 0xff, 0x7fffffff, 0x7ff, 0x7, 0x1, 0x5, 0xa, 0x4, 0x2, 0x4, 0x10000, 0x7], [0x7, 0xfffff7d2, 0x2, 0x1786, 0x5, 0x8e4, 0x0, 0x9, 0xed, 0x40, 0x458, 0x6, 0x2, 0x2, 0x3ff, 0x17894c81, 0x7, 0x8, 0x3, 0x98, 0x5, 0x8, 0xc1e, 0xcd9af0f, 0x4, 0x8, 0x945, 0x6, 0x400, 0x9, 0x73e, 0xaa6a, 0x44, 0x659, 0x4, 0x5, 0x53a, 0x4, 0x3, 0xde90, 0x11, 0x4, 0xfffffff9, 0x0, 0x3, 0x7, 0xffff, 0x8, 0x400, 0x7, 0x80000000, 0x2aea, 0x3, 0x2, 0x0, 0x9, 0x8, 0x9, 0x6, 0x11, 0x6, 0x4, 0x5, 0x9], [0xe, 0x4, 0x5, 0x800, 0xcd, 0x2, 0x6, 0x7, 0x4, 0x101, 0xb342, 0x1, 0x3, 0x4, 0x200, 0x9, 0x4, 0x4, 0x2, 0xfffffff1, 0x0, 0x9, 0xffff, 0xabe, 0x17, 0x133, 0x6, 0x4d, 0x40, 0x2, 0x0, 0x3ff, 0x134000, 0x2, 0x1, 0x4, 0x47, 0x3, 0xe01c, 0x2, 0x6, 0x7, 0x1, 0x2, 0x8, 0x9, 0x8, 0x239, 0xe88, 0xfffffffd, 0x375d, 0x8, 0x40, 0xefc, 0x7, 0x100, 0x2, 0x5, 0x2, 0x800, 0x1, 0x9, 0x200, 0xe44], [0x800, 0xfffffcb5, 0x3, 0x1, 0x1, 0x19c1, 0x40, 0x8, 0x2, 0x0, 0xf, 0x3, 0x1000, 0x4, 0x3, 0x4, 0x3, 0x2, 0x1, 0x2, 0x2, 0x3ff, 0xf, 0x2, 0x6, 0x124, 0x7f, 0x5, 0x3, 0x0, 0x1, 0x4, 0x401, 0x4, 0x80000000, 0xbc2f8d8, 0x5, 0xff, 0x1d2b2a0a, 0x4, 0x4, 0xffff, 0x28, 0xa22, 0x200, 0x2, 0x0, 0x8, 0x767, 0x6, 0x1, 0x8, 0x7dc, 0x0, 0xed7, 0x5c59, 0xff, 0x7, 0x2, 0x69ba, 0x92, 0x3, 0x1, 0x722]}, 0x45c) sendfile(r2, r1, &(0x7f0000002080)=0x3a, 0x23b) 1.622720263s ago: executing program 4 (id=70): bpf$TOKEN_CREATE(0x24, &(0x7f0000000140), 0x8) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x303}, "e3da62162895237d", "5e1cdd4a00000000000000000000000000008000", "a98ae4df", "cd5019dfdf2f702b"}, 0x38) sendto$inet6(r0, &(0x7f0000000480)='&', 0x1, 0x0, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="240000001800090000080000000000001c140000fe00000100000000080013"], 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000380)=@gcm_256={{0x304}, "480ca6eda49ed6a6", "3a2cc8b276a753b0e23e2a8436b0e1d53d11b70c57abe2e932240e766d3aebfd", '\x00\x00\t\x00', "e96e232f2004a832"}, 0x38) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000680)=ANY=[@ANYBLOB="50000000bbe1a66b15c7dc1dea0ce47a4a2e21627e63c9fe529e", @ANYRES64=r0, @ANYBLOB="0101000000000000005f74756e00000000000000000024000280040001001c00038022b117fae48b7b2183e459af0b1929ac4c5ba7a3f42d2a1e61d178e3748a2e0e799315d6d9c743eef889b14337157a48b8aadb7f71c5ffd945b4b1fd9ed7b9b4baedf182ef6074726c486096029c250b1346cf4e77e0fd7bfa2b295071b8e2f058fd3325ead326e0bd0549a591b63e9e875650289c5961283a83b8f5fa9fdb88520e4673fa0a1e9f4780bb5b83d4a1db0310ff78793897dbc2c3e820929ec57db35944cf5255d840ed9fae6d081110ac9db50de83be354aca1"], 0x50}, 0x1, 0x0, 0x0, 0x20000040}, 0x40000) splice(r0, 0x0, r2, 0x0, 0xffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x7, 0x1f, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, r2, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r4, 0x0, 0x8000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x304, 0x36}, "1a88ef816c4b42ed", "a5fdeb69a751e94df50ad7e9fb434d1665e9298b01e49419567b443803cf578f", "6d02cd81", "066580001e00"}, 0x38) setsockopt$inet6_tcp_int(r5, 0x11a, 0x4, &(0x7f0000000080), 0x4) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, 0x0, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f00000004c0), r3) 1.522675283s ago: executing program 3 (id=71): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000400)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) close(0x3) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10) r2 = socket$rds(0x15, 0x5, 0x0) ppoll(&(0x7f00000001c0)=[{r2}], 0x1, 0x0, 0x0, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r2, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f0000000ec0)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa1000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={0x0, r0}, 0x18) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f0000000340)={r4, r4, 0x8, 0x0, 0x0, 0x82, 0xca, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r6, &(0x7f0000000200), 0xf000) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@private, 0x4e24, 0x0, 0x0, 0xfffe, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x1000, 0x0, 0xffffffffffffffff, 0x1}, {0x0, 0xffffffffffffff6e}, 0xfffffffd, 0x0, 0x1, 0x1}}, 0xb8}}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x1, 0x0, 0x1}}, 0xb8}}, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x20, 0x0, 0x1}}, 0xb8}}, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000640)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xffff, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r12 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x4, 0x7, &(0x7f0000000040)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @map_fd={0x18, 0x2, 0x1, 0x0, r6}, @call={0x85, 0x0, 0x0, 0x54}, @cb_func={0x18, 0x4, 0x4, 0x0, 0x6}, @alu={0x7, 0x1, 0xc, 0x4, 0xb, 0xffffffffffffffc0, 0x1}], &(0x7f0000000180)='GPL\x00', 0x2, 0x7c, &(0x7f00000004c0)=""/124, 0x41100, 0x1, '\x00', 0x0, @fallback=0x29, r5, 0x8, &(0x7f00000001c0)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000240)={0x1, 0x3, 0x1, 0x873d}, 0x10, 0x0, r3, 0x4, &(0x7f0000000700)=[0xffffffffffffffff, r10, r11, r12], &(0x7f0000000740)=[{0x3, 0x5, 0xb, 0x4}, {0x2, 0x2, 0x7, 0x4}, {0x1, 0x2, 0x1, 0x7}, {0x0, 0x4, 0x10, 0x2}], 0x10, 0x9, @void, @value}, 0x94) ioctl$sock_bt_hidp_HIDPCONNDEL(r5, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) 1.42084465s ago: executing program 1 (id=72): openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x480000, 0x0) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) iopl(0x3) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4}, 0x0) timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) mount$cgroup2(0x0, &(0x7f0000000040)='./bus\x00', 0x0, 0x8008, 0x0) recvmsg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)}, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) get_robust_list(0x0, 0x0, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000300)=0x1, 0x4) 1.41603741s ago: executing program 2 (id=73): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 1.333872146s ago: executing program 0 (id=74): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r2}, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r3}, 0x18) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000240)=ANY=[@ANYBLOB="879909c13f30bedb692b9e5a9b0fc27c41e7f0eb326c2cd0474fe50bc396f4e96e7521bb0294761563c8cc085d8b3a6464ed709951c00229db24b9", @ANYRES16=r5, @ANYBLOB="ffff2abd7000fcdbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x400c9}, 0x20000000) socket$inet6(0xa, 0x80002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x3, 0x261, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000540)={r6, &(0x7f0000000400)="c7", &(0x7f0000000380)=@tcp6}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{r6}, &(0x7f0000000d00), &(0x7f00000003c0)='%pS \x00'}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f00000000c0)={r6, &(0x7f00000001c0), 0x0}, 0x20) 1.228595112s ago: executing program 4 (id=75): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) write$sndseq(0xffffffffffffffff, &(0x7f0000000180)=[{0xff, 0x0, 0x0, 0x0, @tick=0x4, {}, {}, @result={0x1, 0x2}}, {0x0, 0x0, 0xff, 0x3, @tick=0xf27, {0x1}, {}, @addr={0x2a, 0x5}}], 0x38) ioctl$SIOCAX25CTLCON(0xffffffffffffffff, 0x89e8, &(0x7f0000000100)={@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x0, 0x100000000eb1, 0x3, [@default, @null, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.073935074s ago: executing program 2 (id=76): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd0000000000000000000000e4ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000067ff"], 0x310) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast2}}]}, 0x190) 284.510212ms ago: executing program 4 (id=77): mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$9p_virtio(&(0x7f00000001c0), 0x0, 0x0, 0x2, 0x0) chdir(&(0x7f0000000140)='./file0\x00') preadv(0xffffffffffffffff, &(0x7f0000002480), 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x1) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) semctl$IPC_STAT(0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = dup(0xffffffffffffffff) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x2, 0x1}, 0x20) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) write$cgroup_int(r0, &(0x7f0000000540), 0xfffffdd8) 162.606095ms ago: executing program 0 (id=78): unshare(0x8000400) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000200)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000140)={0x1f, 0xf6, @none, 0x0, 0x2}, 0xe) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xff, 0x485, &(0x7f0000001040)="$eJzs3M9rHFUcAPDvTJL+bhNrrba2Gq1i8UfSpFV78KCi4EFB0EM9xiSttdtGmgi2BI0i9SgF7+JR8C/w5kXUgwheFTxKoWgQmnqKzK9mu9mkSZpkbfbzgc2+t/Nm3/vOzNt9My+zAbSt3uxPErEjIn6LiO4ie3OB3uJpZnpy+Pr05HASs7Nv/JXk5a5NTw5XRav1tpeZw2lE+mkSzyfz6x2/cPHMUK02er7M90+cfa9//MLFp06fHTo1emr03ODx48eODjz7zODTqxJnFte1/R+OHdj3yluXXxs+cfntH7/JmrX3YLG8Po5but4koCZ6s63292yucdmjy2j7nWBnXTrpbGFDWJaOiMh2V1fe/7ujI+Z2Xne8/ElLGwesqey7afPCi6dmgQ0siVa3AGiN6os+O/+tHus09PhfuPpCxKYyPTM9OTxzI/7OSMvXu9aw/t6IODH175fZI5Z7HQIAYAXysc2TzcZ/aezNn4u5jl3lHEpPRNwVEbsj4u6I2BMR90TkZe+NiPuKlWe7l1h/b0N+/vgnvdK0zaskG/89Vzf2m6mLv3zq6ShzO/P4u5KTp2ujR8ptcji6Nmf5gUXq+O6lXz9faFn9+C97ZPVXY8GyAVc6Gy7QjQxNDK3WRrj6ccT+zmbxJzdmArIjYF9E7F/eW++qEqcf//rAQoVuHf8iVmGeafariMeK/T8VDfFXksXnJ/u3RG30SH91VMz30y+XXl+o/tuKfxVk+3/bzcd/Q4nuf5JivrYrarXR8+PLr+PS758teE6z0uN/U/JmPmf98zvFax8MTUycH4jYlLya56tzuvz1wbl1q3xVPov/8KHm/X93uU4W//0RkR3EByPigYh4sGz7QxHxcEQcWiT+H1585N1F4k8iiZbu/5Gmn383jv+epH6+fgWJjjPff7vQjPnS9v+xmMo/awv5598tLLWBt7n5AAAA4I6QRsSOSNK+It27I9K0r6/4H/49sS2tjY1PPHFy7P1zI8U9Aj3RlVZXurrrrocOJFPlOxb5wfJacbX8aHnd+IuOrXm+b3isNtLi2KHdbb+5/0fV/zN/drS6dcCac78WtK/G/p+2qB3A+lvK979zAdiYmvT/ra1oB7D+nP9D+2rW/z9qyBv/w8Y0v///0eQn64CNyPgf2pf+D+1L/4e2dDv39a88Ud0ssPL32bLkO/zbJVH94sVa1rU15l6JtOUht1Ei6zHrW+ncb6gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADcyf4LAAD///ss5ts=") bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES64=r0, @ANYRES32, @ANYRES8], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) r2 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000080)=0xfffffffffbfffffe) connect$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) ppoll(&(0x7f0000000640)=[{0xffffffffffffffff, 0x8b27b48220d0f67f}, {0xffffffffffffffff, 0x200}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0xc282}, {0xffffffffffffffff, 0xc040}], 0x5, 0x0, 0x0, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000940)={{}, 'syz0\x00', 0x40}) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x12) socket$inet6(0xa, 0x6, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x7ffe, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000087}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000140)=0x2) sendfile(0xffffffffffffffff, r4, 0x0, 0x20000023896) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) listen(r1, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000380)={@local, @random="c4bc9cac9686", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xe2}}}}}}}, 0x0) 101.399507ms ago: executing program 3 (id=79): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000240)=ANY=[@ANYBLOB="879909c13f30bedb692b9e5a9b0fc27c41e7f0eb326c2cd0474fe50bc396f4e96e7521bb0294761563c8cc085d8b3a6464ed709951c00229db24b9", @ANYRES16, @ANYBLOB="ffff2abd7000fcdbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x400c9}, 0x20000000) r2 = socket$inet6(0xa, 0x80002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x3, 0x261, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000540)={r3, &(0x7f0000000400)="c7", &(0x7f0000000380)=@tcp6}, 0x20) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 47.582177ms ago: executing program 2 (id=80): socket$nl_generic(0x10, 0x3, 0x10) pipe(0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4, 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x22000, 0x0) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@delnexthop={0x58, 0x69, 0x10, 0x70bd26, 0x25dfdbfe, {}, [{0x8, 0x1, 0x1}, {0x8}, {0x8, 0x1, 0x2}, {0x8, 0x1, 0x1}, {0x8, 0x1, 0x1}, {0x8, 0x1, 0x1}, {0x8}, {0x8, 0x1, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008000}, 0x80c4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$loop(0x0, 0xffffffff, 0x80000) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x0, 0x28, 0x0, 0x2, 0x0, 0x0, @void, @value}, 0x28) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x80201, 0x0) write$rfkill(r2, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x1}, 0x8) 0s ago: executing program 1 (id=81): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x348, 0x0, 0xc8, 0x8, 0x1b0, 0x5803, 0x278, 0x2e8, 0x2e8, 0x278, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x190, 0x1b0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5df11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f35a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x4}}, @inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@mcast2, @empty, [], [], 'nicvf0\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a8) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f00001e7000/0x2000)=nil, 0x2000, 0x8003, &(0x7f0000000000)=0x9, 0x3, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) read$FUSE(r2, &(0x7f00000007c0)={0x2020}, 0x2020) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.180' (ED25519) to the list of known hosts. [ 67.768438][ T5820] cgroup: Unknown subsys name 'net' [ 67.872930][ T5820] cgroup: Unknown subsys name 'cpuset' [ 67.881154][ T5820] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 69.332244][ T5820] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 70.852299][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.858653][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.991824][ T5838] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 72.004741][ T5838] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 72.012752][ T5838] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 72.018265][ T5853] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 72.020294][ T5838] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 72.035247][ T5838] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 72.040494][ T5853] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 72.042993][ T5838] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 72.050354][ T5853] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 72.056497][ T5838] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 72.070966][ T5856] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 72.079201][ T5854] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 72.087485][ T5853] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 72.100368][ T5854] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 72.101675][ T5855] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 72.114886][ T5854] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 72.115377][ T5855] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 72.129363][ T5853] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 72.133401][ T5854] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 72.137859][ T5855] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 72.151619][ T5854] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 72.151641][ T5855] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 72.159217][ T5854] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 72.167067][ T5855] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 72.173368][ T5854] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 72.180166][ T5855] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 72.187271][ T5142] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 72.193542][ T5853] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 72.217912][ T5856] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 72.225320][ T5856] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 72.237173][ T5856] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 72.244538][ T5856] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 72.253141][ T5856] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 72.260853][ T5856] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 72.271318][ T5856] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 72.280032][ T5142] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 72.577732][ T983] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.587232][ T983] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.645205][ T983] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.653672][ T983] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.672515][ T3527] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.690589][ T3527] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.708532][ T3473] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.723241][ T3473] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.745330][ T983] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.763304][ T983] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.785490][ T5835] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 72.811599][ T983] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.819761][ T983] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.844418][ T983] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.853010][ T983] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.879093][ T983] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.907123][ T983] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.949754][ T3473] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.957562][ T3473] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.988950][ T3527] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.998474][ T3527] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.072523][ T2902] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.085733][ T2902] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.136984][ T5874] loop5: detected capacity change from 0 to 512 [ 73.251490][ T983] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.260874][ T5874] EXT4-fs error (device loop5): ext4_orphan_get:1389: inode #15: comm syz.5.6: casefold flag without casefold feature [ 73.292639][ T5874] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm syz.5.6: couldn't read orphan inode 15 (err -117) [ 73.302547][ T983] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.315826][ T5874] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.138875][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 74.290073][ T5852] Bluetooth: hci2: command tx timeout [ 74.291548][ T5142] Bluetooth: hci1: command tx timeout [ 74.295776][ T5852] Bluetooth: hci3: command tx timeout [ 74.301212][ T5850] Bluetooth: hci0: command tx timeout [ 74.341229][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 74.353544][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 74.369609][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 74.377913][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 74.387101][ T5850] Bluetooth: hci5: command tx timeout [ 74.397932][ T5142] Bluetooth: hci4: command tx timeout [ 74.548573][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 75.262989][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 76.133217][ T5902] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4'. [ 76.329665][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 76.393979][ T5142] Bluetooth: hci3: command tx timeout [ 76.399500][ T5142] Bluetooth: hci2: command tx timeout [ 76.400182][ T5850] Bluetooth: hci1: command tx timeout [ 76.404889][ T5142] Bluetooth: hci0: command tx timeout [ 76.449553][ T5850] Bluetooth: hci4: command tx timeout [ 76.455013][ T5852] Bluetooth: hci5: command tx timeout [ 77.350411][ T5919] loop2: detected capacity change from 0 to 512 [ 77.620056][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 77.679496][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 78.228208][ T5919] EXT4-fs error (device loop2): ext4_orphan_get:1389: inode #15: comm syz.2.11: casefold flag without casefold feature [ 78.284799][ T5928] ======================================================= [ 78.284799][ T5928] WARNING: The mand mount option has been deprecated and [ 78.284799][ T5928] and is ignored by this kernel. Remove the mand [ 78.284799][ T5928] option from the mount to silence this warning. [ 78.284799][ T5928] ======================================================= [ 78.428611][ T5928] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 78.436284][ T5928] UDF-fs: Scanning with blocksize 512 failed [ 78.445168][ T5928] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 78.453468][ T5928] UDF-fs: Scanning with blocksize 1024 failed [ 78.461316][ T5928] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 78.468866][ T5928] UDF-fs: Scanning with blocksize 2048 failed [ 78.476363][ T5928] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 78.483976][ T5928] UDF-fs: Scanning with blocksize 4096 failed [ 78.570099][ T5142] Bluetooth: hci2: command tx timeout [ 78.575839][ T5852] Bluetooth: hci0: command tx timeout [ 78.581650][ T5142] Bluetooth: hci3: command tx timeout [ 78.587427][ T5852] Bluetooth: hci1: command tx timeout [ 78.596822][ T5142] Bluetooth: hci4: command tx timeout [ 78.602487][ T5856] Bluetooth: hci5: command tx timeout [ 79.108370][ T5919] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.11: couldn't read orphan inode 15 (err -117) [ 79.138047][ T5919] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.080808][ T5832] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.254993][ T5831] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.529595][ T5850] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 80.609740][ T5842] Bluetooth: hci2: command tx timeout [ 80.615193][ T5850] Bluetooth: hci0: command tx timeout [ 80.693906][ T5842] Bluetooth: hci5: command tx timeout [ 80.699335][ T5842] Bluetooth: hci1: command tx timeout [ 80.705175][ T5142] Bluetooth: hci3: command tx timeout [ 80.710683][ T5850] Bluetooth: hci4: command tx timeout [ 81.096116][ T5940] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 81.104370][ T5940] UDF-fs: Scanning with blocksize 512 failed [ 81.114339][ T5940] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 81.121903][ T5940] UDF-fs: Scanning with blocksize 1024 failed [ 81.129704][ T5940] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 81.137230][ T5940] UDF-fs: Scanning with blocksize 2048 failed [ 81.144930][ T5940] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 81.152485][ T5940] UDF-fs: Scanning with blocksize 4096 failed [ 83.326237][ T5949] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input5 [ 84.351659][ T5850] Bluetooth: hci6: command 0x1003 tx timeout [ 84.550014][ T5842] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 85.142571][ T2902] Bluetooth: hci6: Frame reassembly failed (-84) [ 86.374808][ T3688] cfg80211: failed to load regulatory.db [ 86.580892][ T5986] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 86.588448][ T5986] UDF-fs: Scanning with blocksize 512 failed [ 86.596551][ T5986] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 86.604104][ T5986] UDF-fs: Scanning with blocksize 1024 failed [ 86.611802][ T5986] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 86.619327][ T5986] UDF-fs: Scanning with blocksize 2048 failed [ 86.627225][ T5986] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 86.635468][ T5986] UDF-fs: Scanning with blocksize 4096 failed [ 87.192890][ T5142] Bluetooth: hci6: command 0x1003 tx timeout [ 87.260408][ T5842] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 87.408274][ T5987] mmap: syz.5.27 (5987) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 88.712444][ T5850] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 89.963581][ T6004] loop4: detected capacity change from 0 to 8 [ 90.006222][ T6004] SQUASHFS error: zlib decompression failed, data probably corrupt [ 90.015145][ T6004] SQUASHFS error: Failed to read block 0x9b: -5 [ 90.022166][ T6004] SQUASHFS error: Unable to read metadata cache entry [99] [ 90.039650][ T6004] SQUASHFS error: Unable to read inode 0x127 [ 90.099668][ T5847] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 90.279941][ T5847] usb 2-1: Using ep0 maxpacket: 32 [ 90.357870][ T5847] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 90.453496][ T5847] usb 2-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 90.473802][ T5847] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.508869][ T5847] usb 2-1: Product: syz [ 90.513975][ T5847] usb 2-1: Manufacturer: syz [ 90.518656][ T5847] usb 2-1: SerialNumber: syz [ 90.583287][ T5847] usb 2-1: config 0 descriptor?? [ 91.004946][ T5993] lo speed is unknown, defaulting to 1000 [ 91.011156][ T5993] lo speed is unknown, defaulting to 1000 [ 91.018109][ T5993] lo speed is unknown, defaulting to 1000 [ 91.042907][ T5993] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 91.087009][ T5993] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 91.404186][ T6023] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 91.411866][ T6023] UDF-fs: Scanning with blocksize 512 failed [ 91.419547][ T6023] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 91.427053][ T6023] UDF-fs: Scanning with blocksize 1024 failed [ 91.435085][ T6023] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 91.442644][ T6023] UDF-fs: Scanning with blocksize 2048 failed [ 91.451395][ T6023] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 91.458929][ T6023] UDF-fs: Scanning with blocksize 4096 failed [ 91.903216][ T6025] lo: entered allmulticast mode [ 91.949424][ T6025] tunl0: entered allmulticast mode [ 91.984152][ T6025] gre0: entered allmulticast mode [ 92.134612][ T6025] gretap0: entered allmulticast mode [ 92.140452][ T6025] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 92.245185][ T983] Bluetooth: hci6: Frame reassembly failed (-84) [ 93.849824][ T5850] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 94.148926][ T3688] usb 2-1: USB disconnect, device number 2 [ 94.233323][ T5993] lo speed is unknown, defaulting to 1000 [ 94.397909][ T5993] lo speed is unknown, defaulting to 1000 [ 94.773731][ T5993] lo speed is unknown, defaulting to 1000 [ 94.840119][ T5993] lo speed is unknown, defaulting to 1000 [ 94.855305][ T5993] lo speed is unknown, defaulting to 1000 [ 94.910568][ T5993] lo speed is unknown, defaulting to 1000 [ 95.021033][ T5993] lo speed is unknown, defaulting to 1000 [ 96.198948][ T6048] loop4: detected capacity change from 0 to 8 [ 96.412199][ T6048] SQUASHFS error: zlib decompression failed, data probably corrupt [ 96.421495][ T6048] SQUASHFS error: Failed to read block 0x9b: -5 [ 96.428310][ T6048] SQUASHFS error: Unable to read metadata cache entry [99] [ 96.499548][ T6048] SQUASHFS error: Unable to read inode 0x127 [ 96.519493][ T5847] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 96.830787][ T5847] usb 2-1: Using ep0 maxpacket: 16 [ 96.870555][ T3688] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 97.160422][ T3688] usb 4-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b [ 97.171074][ T5847] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 97.190226][ T3688] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.211566][ T5847] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 97.230348][ T3688] usb 4-1: config 0 descriptor?? [ 97.244767][ T5847] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 97.273333][ T5847] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 97.295519][ T5847] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.310787][ T5847] usb 2-1: Product: syz [ 97.345274][ T5847] usb 2-1: Manufacturer: syz [ 97.369200][ T5847] usb 2-1: SerialNumber: syz [ 97.475968][ T6056] lo speed is unknown, defaulting to 1000 [ 98.609705][ T3688] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 98.639651][ T5847] usb 2-1: 0:2 : does not exist [ 98.727867][ T5847] usb 2-1: 1:0: cannot get min/max values for control 4 (id 1) [ 99.385809][ T3688] asix 4-1:0.0: probe with driver asix failed with error -61 [ 99.498886][ T3688] usb 4-1: USB disconnect, device number 2 [ 100.890789][ T5847] usb 2-1: USB disconnect, device number 3 [ 102.070313][ T6083] lo: entered allmulticast mode [ 102.077070][ T6083] tunl0: entered allmulticast mode [ 102.083732][ T6083] gre0: entered allmulticast mode [ 102.091102][ T6083] gretap0: entered allmulticast mode [ 102.097686][ T6083] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 102.324939][ T6092] netlink: 20 bytes leftover after parsing attributes in process `syz.2.51'. [ 102.394458][ T5833] udevd[5833]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 102.888721][ T6078] sctp: failed to load transform for md5: -2 [ 104.634419][ T6118] loop1: detected capacity change from 0 to 512 [ 106.259754][ T6118] EXT4-fs error (device loop1): ext4_orphan_get:1389: inode #15: comm syz.1.59: casefold flag without casefold feature [ 106.319655][ T6118] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.59: couldn't read orphan inode 15 (err -117) [ 106.560681][ T6118] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.433024][ T5834] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.759299][ T6154] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 110.677211][ T6161] loop1: detected capacity change from 0 to 512 [ 110.998201][ T6167] netlink: 4 bytes leftover after parsing attributes in process `syz.3.68'. [ 111.244034][ T6161] EXT4-fs error (device loop1): ext4_orphan_get:1389: inode #15: comm syz.1.67: casefold flag without casefold feature [ 111.284617][ T6161] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.67: couldn't read orphan inode 15 (err -117) [ 111.363855][ T5142] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 111.371358][ T6161] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.393474][ T5142] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 111.405013][ T5142] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 111.414596][ T6163] syz.2.69 (6163): drop_caches: 1 [ 111.424205][ T5142] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 111.432446][ T5142] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 111.440223][ T5142] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 111.618392][ T6163] syz.2.69 (6163): drop_caches: 1 [ 112.108238][ T6148] syz.4.64 (6148): drop_caches: 1 [ 112.607982][ T5834] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.705716][ T6180] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci6/hci6:200/input6 [ 113.601701][ T5850] Bluetooth: hci6: command tx timeout [ 113.712967][ T3516] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.810302][ T3516] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.928259][ T3554] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.957758][ T3554] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.078493][ T6202] loop0: detected capacity change from 0 to 512 [ 114.466099][ T6202] EXT4-fs error (device loop0): ext4_orphan_get:1389: inode #15: comm syz.0.78: casefold flag without casefold feature [ 114.485645][ T12] [ 114.486339][ T6202] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.78: couldn't read orphan inode 15 (err -117) [ 114.487969][ T12] ====================================================== [ 114.501456][ T6202] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.506719][ T12] WARNING: possible circular locking dependency detected [ 114.506735][ T12] 6.13.0-syzkaller-09522-gd3d90cc2891c #0 Not tainted [ 114.532935][ T12] ------------------------------------------------------ [ 114.539950][ T12] kworker/u8:1/12 is trying to acquire lock: [ 114.545935][ T12] ffffffff8fcbef88 (rtnl_mutex){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0xac2/0x2030 [ 114.556342][ T12] [ 114.556342][ T12] but task is already holding lock: [ 114.563713][ T12] ffff88807b450768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0x129/0x700 [ 114.574138][ T12] [ 114.574138][ T12] which lock already depends on the new lock. [ 114.574138][ T12] [ 114.584550][ T12] [ 114.584550][ T12] the existing dependency chain (in reverse order) is: [ 114.593571][ T12] [ 114.593571][ T12] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 114.601344][ T12] lock_acquire+0x1ed/0x550 [ 114.606383][ T12] __mutex_lock+0x19c/0x1010 [ 114.611500][ T12] wiphy_register+0x1a49/0x27b0 [ 114.616870][ T12] ieee80211_register_hw+0x354e/0x4240 [ 114.622854][ T12] mac80211_hwsim_new_radio+0x2a9f/0x4aa0 [ 114.629104][ T12] init_mac80211_hwsim+0x87a/0xb00 [ 114.634744][ T12] do_one_initcall+0x24a/0x870 [ 114.640116][ T12] do_initcall_level+0x157/0x210 [ 114.645575][ T12] do_initcalls+0x3f/0x80 [ 114.650435][ T12] kernel_init_freeable+0x435/0x5d0 [ 114.656154][ T12] kernel_init+0x1d/0x2b0 [ 114.661011][ T12] ret_from_fork+0x4d/0x80 [ 114.665951][ T12] ret_from_fork_asm+0x1a/0x30 [ 114.671235][ T12] [ 114.671235][ T12] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 114.678458][ T12] validate_chain+0x18ef/0x5920 [ 114.683831][ T12] __lock_acquire+0x1397/0x2100 [ 114.689209][ T12] lock_acquire+0x1ed/0x550 [ 114.694244][ T12] __mutex_lock+0x19c/0x1010 [ 114.699356][ T12] unregister_netdevice_many_notify+0xac2/0x2030 [ 114.706208][ T12] unregister_netdevice_queue+0x303/0x370 [ 114.712455][ T12] _cfg80211_unregister_wdev+0x163/0x590 [ 114.718606][ T12] ieee80211_remove_interfaces+0x4ef/0x700 [ 114.725027][ T12] ieee80211_unregister_hw+0x5d/0x2c0 [ 114.730923][ T12] mac80211_hwsim_del_radio+0x2c4/0x4c0 [ 114.736996][ T12] hwsim_exit_net+0x5c1/0x670 [ 114.742193][ T12] cleanup_net+0x814/0xd60 [ 114.747131][ T12] process_scheduled_works+0xa68/0x1840 [ 114.753197][ T12] worker_thread+0x870/0xd30 [ 114.758394][ T12] kthread+0x7ab/0x920 [ 114.762989][ T12] ret_from_fork+0x4d/0x80 [ 114.767925][ T12] ret_from_fork_asm+0x1a/0x30 [ 114.773208][ T12] [ 114.773208][ T12] other info that might help us debug this: [ 114.773208][ T12] [ 114.783426][ T12] Possible unsafe locking scenario: [ 114.783426][ T12] [ 114.790866][ T12] CPU0 CPU1 [ 114.796223][ T12] ---- ---- [ 114.801578][ T12] lock(&rdev->wiphy.mtx); [ 114.806083][ T12] lock(rtnl_mutex); [ 114.812583][ T12] lock(&rdev->wiphy.mtx); [ 114.819606][ T12] lock(rtnl_mutex); [ 114.823587][ T12] [ 114.823587][ T12] *** DEADLOCK *** [ 114.823587][ T12] [ 114.831716][ T12] 4 locks held by kworker/u8:1/12: [ 114.836817][ T12] #0: ffff88801baed948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 114.847726][ T12] #1: ffffc90000117c60 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 114.858286][ T12] #2: ffffffff8fcb29d0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0x17a/0xd60 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 114.867716][ T12] #3: ffff88807b450768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0x129/0x700 [ 114.878544][ T12] [ 114.878544][ T12] stack backtrace: [ 114.884420][ T12] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:1 Not tainted 6.13.0-syzkaller-09522-gd3d90cc2891c #0 [ 114.884443][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 114.884459][ T12] Workqueue: netns cleanup_net [ 114.884490][ T12] Call Trace: [ 114.884500][ T12] [ 114.884509][ T12] dump_stack_lvl+0x241/0x360 [ 114.884534][ T12] ? __pfx_dump_stack_lvl+0x10/0x10 [ 114.884555][ T12] ? __pfx__printk+0x10/0x10 [ 114.884592][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 114.884628][ T12] print_circular_bug+0x13a/0x1b0 [ 114.884651][ T12] check_noncircular+0x36a/0x4a0 [ 114.884672][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 114.884706][ T12] ? __pfx_check_noncircular+0x10/0x10 [ 114.884727][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 114.884764][ T12] ? lockdep_lock+0x123/0x2b0 [ 114.884797][ T12] validate_chain+0x18ef/0x5920 [ 114.884828][ T12] ? __pfx_validate_chain+0x10/0x10 [ 114.884848][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 114.884885][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 114.884917][ T12] ? mark_lock+0x9a/0x360 [ 114.884949][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 114.884981][ T12] ? __lock_acquire+0x1397/0x2100 [ 114.885016][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 114.885050][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 114.885082][ T12] ? mark_lock+0x9a/0x360 [ 114.885111][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 114.885146][ T12] __lock_acquire+0x1397/0x2100 [ 114.885182][ T12] lock_acquire+0x1ed/0x550 [ 114.885210][ T12] ? unregister_netdevice_many_notify+0xac2/0x2030 [ 114.885237][ T12] ? __pfx_lock_acquire+0x10/0x10 [ 114.885265][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 114.885299][ T12] ? __pfx___might_resched+0x10/0x10 [ 114.885326][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 114.885358][ T12] ? finish_wait+0xd4/0x1e0 [ 114.885388][ T12] __mutex_lock+0x19c/0x1010 [ 114.885416][ T12] ? unregister_netdevice_many_notify+0xac2/0x2030 [ 114.885439][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 114.885475][ T12] ? unregister_netdevice_many_notify+0xac2/0x2030 [ 114.885499][ T12] ? __pfx___mutex_lock+0x10/0x10 [ 114.885525][ T12] ? __pfx___might_resched+0x10/0x10 [ 114.885549][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 114.885584][ T12] ? unregister_netdevice_many_notify+0x9fa/0x2030 [ 114.885607][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 114.885640][ T12] ? unregister_netdevice_many_notify+0x9fa/0x2030 [ 114.885666][ T12] unregister_netdevice_many_notify+0xac2/0x2030 [ 114.885689][ T12] ? mark_lock+0x9a/0x360 [ 114.885722][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 114.885761][ T12] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 114.885784][ T12] ? kernfs_remove_by_name_ns+0x11b/0x160 [ 114.885809][ T12] ? __pfx_lock_release+0x10/0x10 [ 114.885845][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 114.885880][ T12] unregister_netdevice_queue+0x303/0x370 [ 114.885914][ T12] ? __pfx_up_write+0x10/0x10 [ 114.885935][ T12] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 114.885968][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 114.886004][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 114.886036][ T12] ? kernfs_remove_by_name_ns+0x11b/0x160 [ 114.886061][ T12] _cfg80211_unregister_wdev+0x163/0x590 [ 114.886086][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 114.886121][ T12] ieee80211_remove_interfaces+0x4ef/0x700 [ 114.886158][ T12] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 114.886191][ T12] ? rcu_is_watching+0x15/0xb0 [ 114.886216][ T12] ieee80211_unregister_hw+0x5d/0x2c0 [ 114.886246][ T12] mac80211_hwsim_del_radio+0x2c4/0x4c0 [ 114.886280][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 114.886315][ T12] ? __pfx_mac80211_hwsim_del_radio+0x10/0x10 [ 114.886347][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 114.886384][ T12] hwsim_exit_net+0x5c1/0x670 [ 114.886413][ T12] ? __pfx_hwsim_exit_net+0x10/0x10 [ 114.886441][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 114.886474][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 114.886506][ T12] ? __ip_vs_dev_cleanup_batch+0x239/0x260 [ 114.886537][ T12] cleanup_net+0x814/0xd60 [ 114.886567][ T12] ? __pfx_cleanup_net+0x10/0x10 [ 114.886600][ T12] ? process_scheduled_works+0x976/0x1840 [ 114.886625][ T12] process_scheduled_works+0xa68/0x1840 [ 114.886663][ T12] ? __pfx_process_scheduled_works+0x10/0x10 [ 114.886692][ T12] ? assign_work+0x364/0x3d0 [ 114.886717][ T12] worker_thread+0x870/0xd30 [ 114.886754][ T12] ? __kthread_parkme+0x169/0x1d0 [ 114.886783][ T12] ? __pfx_worker_thread+0x10/0x10 [ 114.886808][ T12] kthread+0x7ab/0x920 [ 114.886836][ T12] ? __pfx_kthread+0x10/0x10 [ 114.886867][ T12] ? __pfx_worker_thread+0x10/0x10 [ 114.886892][ T12] ? __pfx_kthread+0x10/0x10 [ 114.886920][ T12] ? __pfx_kthread+0x10/0x10 [ 114.886951][ T12] ? __pfx_kthread+0x10/0x10 [ 114.886979][ T12] ? _raw_spin_unlock_irq+0x23/0x50 [ 114.887001][ T12] ? srso_alias_return_thunk+0x5/0xfbef5 [ 114.887033][ T12] ? lockdep_hardirqs_on+0x99/0x150 [ 114.887058][ T12] ? __pfx_kthread+0x10/0x10 [ 114.887088][ T12] ret_from_fork+0x4d/0x80 [ 114.887115][ T12] ? __pfx_kthread+0x10/0x10 [ 114.887144][ T12] ret_from_fork_asm+0x1a/0x30 [ 114.887176][ T12] [ 116.190917][ T5850] Bluetooth: hci6: command tx timeout [ 116.731788][ T5835] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.