Warning: Permanently added '10.128.0.88' (ECDSA) to the list of known hosts. 2021/04/08 21:47:28 fuzzer started 2021/04/08 21:47:28 dialing manager at 10.128.0.163:42991 2021/04/08 21:47:28 syscalls: 3557 2021/04/08 21:47:28 code coverage: enabled 2021/04/08 21:47:28 comparison tracing: enabled 2021/04/08 21:47:28 extra coverage: enabled 2021/04/08 21:47:28 setuid sandbox: enabled 2021/04/08 21:47:28 namespace sandbox: enabled 2021/04/08 21:47:28 Android sandbox: /sys/fs/selinux/policy does not exist 2021/04/08 21:47:28 fault injection: enabled 2021/04/08 21:47:28 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2021/04/08 21:47:28 net packet injection: enabled 2021/04/08 21:47:28 net device setup: enabled 2021/04/08 21:47:28 concurrency sanitizer: enabled 2021/04/08 21:47:28 devlink PCI setup: PCI device 0000:00:10.0 is not available 2021/04/08 21:47:28 USB emulation: enabled 2021/04/08 21:47:28 hci packet injection: enabled 2021/04/08 21:47:28 wifi device emulation: enabled 2021/04/08 21:47:28 802.15.4 emulation: enabled 2021/04/08 21:47:28 suppressing KCSAN reports in functions: 'tick_nohz_stop_tick' 2021/04/08 21:47:28 fetching corpus: 0, signal 0/2000 (executing program) 2021/04/08 21:47:28 fetching corpus: 34, signal 18809/19167 (executing program) 2021/04/08 21:47:28 fetching corpus: 34, signal 18809/19348 (executing program) 2021/04/08 21:47:28 fetching corpus: 34, signal 18809/19543 (executing program) 2021/04/08 21:47:28 fetching corpus: 34, signal 18809/19725 (executing program) 2021/04/08 21:47:28 fetching corpus: 34, signal 18809/19873 (executing program) 2021/04/08 21:47:28 fetching corpus: 34, signal 18809/20034 (executing program) 2021/04/08 21:47:28 fetching corpus: 34, signal 18809/20222 (executing program) 2021/04/08 21:47:28 fetching corpus: 34, signal 18809/20389 (executing program) 2021/04/08 21:47:28 fetching corpus: 34, signal 18809/20574 (executing program) 2021/04/08 21:47:28 fetching corpus: 34, signal 18809/20622 (executing program) 2021/04/08 21:47:28 fetching corpus: 34, signal 18809/20622 (executing program) 2021/04/08 21:47:30 starting 6 fuzzer processes 21:47:30 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000140)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000740)={0x2}) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, 0x0) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)={0x0, 0x7, 0x4, 0x2000, 0x7, {}, {0x6, 0x0, 0x9, 0x55, 0x0, 0xe9, "bab005ec"}, 0x6, 0x4, @offset=0xffffffff, 0x7c69, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000200)={0x400, 0x8, 0x4, 0x100000, 0x9, {0x0, 0x2710}, {0x2, 0x0, 0x0, 0x40, 0xfb, 0x1, "b284f5a7"}, 0x0, 0x4, @offset=0x1, 0x5, 0x0, r1}) r3 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/mm/transparent_hugepage/khugepaged/scan_sleep_millisecs\x00', 0x1, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x0, 0x0) r5 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_DQBUF(r5, 0xc0585611, &(0x7f00000002c0)={0x100, 0xa, 0x4, 0x10000, 0x8000, {0x0, 0x2710}, {0x4, 0x2, 0xfa, 0x9, 0x7, 0x4, "1a0e515a"}, 0x291d37be, 0x3, @planes=&(0x7f0000000280)={0x3, 0x7, @mem_offset=0xfff, 0xb68}, 0xfffff4ba, 0x0, r2}) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0xb) syz_open_dev$swradio(&(0x7f0000000380)='/dev/swradio#\x00', 0x1, 0x2) write$khugepaged_scan(r3, 0x0, 0x0) syz_open_dev$swradio(&(0x7f0000000340)='/dev/swradio#\x00', 0x0, 0x2) 21:47:30 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000140)={0x0, 0x0, [0x1, 0x0, 0x0, 0x0, 0x0, 0x7fff]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x48}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x2, 0x100000001, 0x0, 0xc5e]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x800008000}, 0x1000, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 21:47:30 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00', 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)={0x30, r2, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @loopback}]}, 0x30}}, 0x0) 21:47:31 executing program 3: r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) write$sysctl(r0, 0x0, 0x0) 21:47:31 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)={0x5, 0x2, 0x1100, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x30]}, 0x40) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r0, &(0x7f0000000000), 0x0}, 0x20) 21:47:31 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f0000000240)="17000000020001000003be8c5ee17688a8003c080303390000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018200000000f5009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba000840024f0298e9e90554232a80e45820b170dfe605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e019b64870000002008b9693f9476c06da0da8", 0xb8) [ 33.674439][ T8368] IPVS: ftp: loaded support on port[0] = 21 [ 33.748942][ T8368] chnl_net:caif_netlink_parms(): no params data found [ 33.782354][ T8368] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.789544][ T8368] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.803270][ T8368] device bridge_slave_0 entered promiscuous mode [ 33.812538][ T8368] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.820116][ T8368] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.828087][ T8368] device bridge_slave_1 entered promiscuous mode [ 33.846569][ T8368] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.849209][ T8370] IPVS: ftp: loaded support on port[0] = 21 [ 33.870036][ T8368] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.889814][ T8368] team0: Port device team_slave_0 added [ 33.900580][ T8368] team0: Port device team_slave_1 added [ 33.913709][ T8368] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.920935][ T8368] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.947175][ T8368] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.965000][ T8368] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.984226][ T8368] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.012365][ T8368] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.036001][ T8372] IPVS: ftp: loaded support on port[0] = 21 [ 34.050072][ T8368] device hsr_slave_0 entered promiscuous mode [ 34.057519][ T8368] device hsr_slave_1 entered promiscuous mode [ 34.149608][ T8370] chnl_net:caif_netlink_parms(): no params data found [ 34.200397][ T8374] IPVS: ftp: loaded support on port[0] = 21 [ 34.224552][ T8372] chnl_net:caif_netlink_parms(): no params data found [ 34.290583][ T8370] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.297924][ T8370] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.306676][ T8370] device bridge_slave_0 entered promiscuous mode [ 34.344233][ T8370] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.360553][ T8370] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.369102][ T8370] device bridge_slave_1 entered promiscuous mode [ 34.381139][ T8372] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.388792][ T8372] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.396331][ T8372] device bridge_slave_0 entered promiscuous mode [ 34.411619][ T8376] IPVS: ftp: loaded support on port[0] = 21 [ 34.417097][ T8374] chnl_net:caif_netlink_parms(): no params data found [ 34.427996][ T8368] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 34.439668][ T8372] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.449812][ T8372] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.457450][ T8372] device bridge_slave_1 entered promiscuous mode [ 34.487185][ T8370] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.497526][ T8368] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 34.518111][ T8372] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.527305][ T8368] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 34.540266][ T8368] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 34.551787][ T8370] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.562246][ T8372] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.582078][ T8372] team0: Port device team_slave_0 added [ 34.599487][ T8370] team0: Port device team_slave_0 added [ 34.601053][ T8378] IPVS: ftp: loaded support on port[0] = 21 [ 34.608220][ T8370] team0: Port device team_slave_1 added [ 34.618650][ T8372] team0: Port device team_slave_1 added [ 34.658362][ T8372] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.669726][ T8372] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.702835][ T8372] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.721945][ T8374] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.732197][ T8374] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.741279][ T8374] device bridge_slave_0 entered promiscuous mode [ 34.749306][ T8370] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.757199][ T8370] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.785201][ T8370] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.798443][ T8370] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.806179][ T8370] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.833717][ T8370] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.857238][ T8372] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.864869][ T8372] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.891787][ T8372] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.906917][ T8374] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.914025][ T8374] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.923189][ T8374] device bridge_slave_1 entered promiscuous mode [ 34.960784][ T8374] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.971707][ T8370] device hsr_slave_0 entered promiscuous mode [ 34.978809][ T8370] device hsr_slave_1 entered promiscuous mode [ 34.985885][ T8370] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 34.994461][ T8370] Cannot create hsr debugfs directory [ 35.011959][ T8374] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.031257][ T8374] team0: Port device team_slave_0 added [ 35.041014][ T8374] team0: Port device team_slave_1 added [ 35.071097][ T8372] device hsr_slave_0 entered promiscuous mode [ 35.078878][ T8372] device hsr_slave_1 entered promiscuous mode [ 35.085738][ T8372] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 35.093296][ T8372] Cannot create hsr debugfs directory [ 35.109803][ T8374] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.117558][ T8374] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.144818][ T8374] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.180951][ T8374] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.188333][ T8374] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.218511][ T8374] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.244572][ T8378] chnl_net:caif_netlink_parms(): no params data found [ 35.256271][ T8376] chnl_net:caif_netlink_parms(): no params data found [ 35.281767][ T8374] device hsr_slave_0 entered promiscuous mode [ 35.288385][ T8374] device hsr_slave_1 entered promiscuous mode [ 35.296474][ T8374] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 35.304020][ T8374] Cannot create hsr debugfs directory [ 35.361658][ T8376] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.369581][ T8376] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.378907][ T8376] device bridge_slave_0 entered promiscuous mode [ 35.388017][ T8376] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.395425][ T8376] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.403056][ T8376] device bridge_slave_1 entered promiscuous mode [ 35.428898][ T8372] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 35.447403][ T8376] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.466414][ T8372] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 35.475533][ T8376] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.485809][ T8378] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.492977][ T8378] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.502303][ T8378] device bridge_slave_0 entered promiscuous mode [ 35.510217][ T8378] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.517611][ T8378] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.525366][ T8378] device bridge_slave_1 entered promiscuous mode [ 35.538956][ T8368] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.549590][ T8372] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 35.568952][ T8370] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 35.579067][ T8370] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 35.591682][ T8372] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 35.602241][ T8378] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.615088][ T8370] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 35.627162][ T8376] team0: Port device team_slave_0 added [ 35.639747][ T8376] team0: Port device team_slave_1 added [ 35.646987][ T8378] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.663537][ T8370] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 35.677082][ T3583] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 35.684619][ T3583] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 35.701649][ T8378] team0: Port device team_slave_0 added [ 35.708780][ T8378] team0: Port device team_slave_1 added [ 35.714786][ T3583] Bluetooth: hci0: command 0x0409 tx timeout [ 35.726512][ T8368] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.736168][ T8374] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 35.752289][ T8374] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 35.760491][ T8378] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.767771][ T8378] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.794004][ T8378] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.806492][ T8378] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.813432][ T8378] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.839914][ T8378] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.851735][ T8376] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.858887][ T8376] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.874848][ T19] Bluetooth: hci1: command 0x0409 tx timeout [ 35.886915][ T8376] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.906058][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 35.914540][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 35.922944][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.930033][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.938435][ T8374] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 35.957976][ T8376] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.965068][ T8376] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.991361][ T8376] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.005910][ T3583] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 36.013792][ T3583] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 36.022411][ T3583] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 36.030908][ T3583] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.039551][ T3583] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.048386][ T8374] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 36.055296][ T5] Bluetooth: hci2: command 0x0409 tx timeout [ 36.064586][ T8378] device hsr_slave_0 entered promiscuous mode [ 36.071572][ T8378] device hsr_slave_1 entered promiscuous mode [ 36.078423][ T8378] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 36.087268][ T8378] Cannot create hsr debugfs directory [ 36.103115][ T8376] device hsr_slave_0 entered promiscuous mode [ 36.110173][ T8376] device hsr_slave_1 entered promiscuous mode [ 36.116858][ T8376] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 36.124419][ T8376] Cannot create hsr debugfs directory [ 36.146119][ T9456] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 36.171056][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 36.194776][ T9456] Bluetooth: hci3: command 0x0409 tx timeout [ 36.222707][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 36.231931][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 36.241382][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 36.250050][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 36.258951][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 36.289155][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 36.297705][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 36.306199][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 36.315480][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 36.330160][ T8372] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.338584][ T8368] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 36.355110][ T8370] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.365350][ T3583] Bluetooth: hci4: command 0x0409 tx timeout [ 36.368051][ T8378] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 36.391311][ T8374] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.405257][ T8370] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.413467][ T8378] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 36.425075][ T8378] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 36.434249][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 36.442276][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 36.462931][ T8376] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 36.475725][ T8378] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 36.487224][ T8372] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.496987][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 36.506828][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 36.515570][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.522770][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.531021][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 36.539860][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 36.547702][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 36.556583][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 36.566185][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.574162][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.582565][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 36.591211][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 36.599747][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.606785][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.614663][ T5] Bluetooth: hci5: command 0x0409 tx timeout [ 36.614687][ T8376] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 36.632362][ T8376] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 36.647275][ T8374] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.656863][ T3583] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 36.664859][ T3583] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 36.672629][ T3583] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 36.682259][ T3583] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 36.690843][ T3583] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.697931][ T3583] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.707057][ T3583] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 36.715847][ T3583] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 36.723315][ T3583] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 36.735391][ T8376] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 36.775190][ T3131] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 36.782697][ T3131] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 36.790923][ T3131] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 36.800049][ T3131] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 36.809161][ T3131] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 36.819709][ T3131] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 36.829095][ T3131] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 36.837833][ T3131] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 36.846404][ T3131] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.853528][ T3131] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.861680][ T3131] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 36.870546][ T3131] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 36.879329][ T3131] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.886440][ T3131] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.894243][ T3131] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 36.903452][ T3131] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 36.913346][ T3131] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 36.921296][ T3131] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 36.957133][ T8368] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.965414][ T9456] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 36.973919][ T9456] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 36.982715][ T9456] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 36.992026][ T9456] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 37.000595][ T9456] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 37.009438][ T9456] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 37.017882][ T9456] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 37.026241][ T9456] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 37.034665][ T9456] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 37.043003][ T9456] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 37.051449][ T9456] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 37.059826][ T9456] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 37.068290][ T9456] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 37.076940][ T9456] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 37.085496][ T9456] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 37.094047][ T9456] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 37.102468][ T9456] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 37.115490][ T8370] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 37.131719][ T9456] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 37.139716][ T9456] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 37.148067][ T9456] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 37.157182][ T9456] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 37.165506][ T9456] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 37.173758][ T9456] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 37.181997][ T9456] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 37.190316][ T9456] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 37.216392][ T8372] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 37.228331][ T8374] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 37.244609][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 37.252033][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 37.260399][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 37.269259][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 37.283922][ T8378] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.298696][ T8376] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.313662][ T8376] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.324172][ T8370] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.334567][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 37.342141][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 37.350284][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 37.357870][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 37.373832][ T8368] device veth0_vlan entered promiscuous mode [ 37.383762][ T8372] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.393101][ T4812] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 37.403179][ T4812] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 37.412096][ T4812] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.419161][ T4812] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.427381][ T4812] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 37.436110][ T4812] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 37.444860][ T4812] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 37.453669][ T4812] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 37.462376][ T4812] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.469494][ T4812] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.480491][ T8368] device veth1_vlan entered promiscuous mode [ 37.496035][ T8378] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.503351][ T9568] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 37.511387][ T9568] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 37.519453][ T9568] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 37.527376][ T9568] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 37.536182][ T9568] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 37.544568][ T9568] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 37.553365][ T9568] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 37.561645][ T9568] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 37.570633][ T9568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 37.578905][ T9568] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 37.602447][ T8376] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 37.613778][ T8376] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.626862][ T8374] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.641335][ T9568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 37.650598][ T9568] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 37.660708][ T9568] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 37.669380][ T9568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 37.679309][ T9568] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 37.688030][ T9568] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 37.697538][ T9568] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 37.705961][ T9568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 37.714445][ T9568] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 37.722686][ T9568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 37.732863][ T9568] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 37.741403][ T9568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 37.751321][ T9568] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 37.760166][ T9568] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 37.769653][ T9568] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 37.783901][ T8368] device veth0_macvtap entered promiscuous mode [ 37.793469][ T8368] device veth1_macvtap entered promiscuous mode [ 37.801990][ T4812] Bluetooth: hci0: command 0x041b tx timeout [ 37.810741][ T9682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 37.819721][ T9682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 37.829021][ T9682] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 37.837913][ T9682] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 37.845614][ T9682] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 37.853061][ T9682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 37.861956][ T9682] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 37.872404][ T9682] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.879459][ T9682] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.900367][ T8376] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.916498][ T3131] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 37.924878][ T3131] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 37.932628][ T3131] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 37.943243][ T3131] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 37.951874][ T3131] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 37.960905][ T3131] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 37.969983][ T3131] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 37.977939][ T3131] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 37.985864][ T3131] Bluetooth: hci1: command 0x041b tx timeout [ 37.999405][ T8372] device veth0_vlan entered promiscuous mode [ 38.010672][ T8368] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.019477][ T8370] device veth0_vlan entered promiscuous mode [ 38.034245][ T4812] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 38.042669][ T4812] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 38.052909][ T4812] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.059986][ T4812] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.067845][ T4812] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 38.077108][ T4812] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 38.085893][ T4812] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 38.093850][ T4812] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 38.102470][ T4812] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 38.111030][ T4812] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 38.120005][ T4812] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 38.128279][ T4812] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 38.144166][ T4812] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 38.151839][ T4812] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 38.160164][ T4812] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 38.171369][ T4812] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 38.179302][ T4812] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 38.187804][ T4812] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 38.196952][ T4812] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 38.205682][ T4812] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 38.214507][ T4812] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 38.222733][ T4812] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 38.231022][ T4812] Bluetooth: hci2: command 0x041b tx timeout [ 38.233670][ T8368] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.248450][ T8370] device veth1_vlan entered promiscuous mode [ 38.255478][ T8374] device veth0_vlan entered promiscuous mode [ 38.263675][ T8372] device veth1_vlan entered promiscuous mode [ 38.275804][ T9683] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 38.283756][ T9683] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 38.292065][ T9683] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 38.300787][ T9683] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 38.310058][ T8368] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.318955][ T9683] Bluetooth: hci3: command 0x041b tx timeout [ 38.322926][ T8368] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.333884][ T8368] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.342723][ T8368] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.360071][ T8374] device veth1_vlan entered promiscuous mode [ 38.370321][ T8378] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.381410][ T8378] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 38.398060][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 38.406225][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 38.415513][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 38.434539][ T9683] Bluetooth: hci4: command 0x041b tx timeout [ 38.452642][ T8998] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 38.461513][ T8998] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 38.471050][ T8998] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 38.479233][ T8998] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 38.487753][ T8998] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 38.497686][ T8998] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 38.511773][ T8378] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.545093][ T8374] device veth0_macvtap entered promiscuous mode [ 38.559989][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 38.568149][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 38.577157][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 38.585884][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 38.594987][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 38.603765][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 38.612842][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 38.621842][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 38.634889][ T8372] device veth0_macvtap entered promiscuous mode [ 38.647320][ T8376] device veth0_vlan entered promiscuous mode [ 38.661690][ T8370] device veth0_macvtap entered promiscuous mode [ 38.673166][ T8374] device veth1_macvtap entered promiscuous mode [ 38.680737][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 38.689708][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 38.697408][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 38.706710][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 38.714929][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 38.722922][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 38.732317][ T5] Bluetooth: hci5: command 0x041b tx timeout [ 38.737830][ T8376] device veth1_vlan entered promiscuous mode [ 38.746220][ T8372] device veth1_macvtap entered promiscuous mode [ 38.759652][ T8] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.765266][ T8370] device veth1_macvtap entered promiscuous mode [ 38.801616][ T2113] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.809125][ T8] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.814497][ T2113] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.829256][ T8374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 38.840587][ T8374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.851839][ T8374] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.871818][ T8370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 38.882310][ T8370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.896387][ T8370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 38.907338][ T8370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.918442][ T8370] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.926358][ T8998] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 38.934988][ T8998] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 38.942968][ T8998] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 38.952003][ T8998] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 38.960185][ T8998] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 38.968715][ T8998] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 38.976824][ T8998] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 38.985734][ T8998] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 38.994926][ T8998] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 39.003387][ T8998] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 39.012426][ T8998] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 39.021669][ T8998] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 39.030621][ T8998] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 39.039329][ T8998] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 39.049728][ T8372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 39.061413][ T8372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.071499][ T8372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 39.082344][ T8372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.092588][ T8372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 39.103195][ T8372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.114968][ T8372] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.124194][ T8374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 39.135616][ T8374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.147127][ T8374] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.157993][ T8370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 39.168691][ T8370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.178841][ T8370] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 39.189314][ T8370] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.200058][ T8370] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.210756][ T8370] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.238220][ T8370] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.247018][ T8370] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.255888][ T8370] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.268173][ T8376] device veth0_macvtap entered promiscuous mode [ 39.277571][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 39.286914][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 39.297896][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 39.307160][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 39.317186][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 39.335549][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready 21:47:37 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000140)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000740)={0x2}) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, 0x0) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)={0x0, 0x7, 0x4, 0x2000, 0x7, {}, {0x6, 0x0, 0x9, 0x55, 0x0, 0xe9, "bab005ec"}, 0x6, 0x4, @offset=0xffffffff, 0x7c69, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000200)={0x400, 0x8, 0x4, 0x100000, 0x9, {0x0, 0x2710}, {0x2, 0x0, 0x0, 0x40, 0xfb, 0x1, "b284f5a7"}, 0x0, 0x4, @offset=0x1, 0x5, 0x0, r1}) r3 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/mm/transparent_hugepage/khugepaged/scan_sleep_millisecs\x00', 0x1, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x0, 0x0) r5 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_DQBUF(r5, 0xc0585611, &(0x7f00000002c0)={0x100, 0xa, 0x4, 0x10000, 0x8000, {0x0, 0x2710}, {0x4, 0x2, 0xfa, 0x9, 0x7, 0x4, "1a0e515a"}, 0x291d37be, 0x3, @planes=&(0x7f0000000280)={0x3, 0x7, @mem_offset=0xfff, 0xb68}, 0xfffff4ba, 0x0, r2}) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0xb) syz_open_dev$swradio(&(0x7f0000000380)='/dev/swradio#\x00', 0x1, 0x2) write$khugepaged_scan(r3, 0x0, 0x0) syz_open_dev$swradio(&(0x7f0000000340)='/dev/swradio#\x00', 0x0, 0x2) [ 39.350206][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 39.366274][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 39.377357][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 39.388841][ T8372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 39.403940][ T8372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.414785][ T8372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 39.425796][ T8372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.436037][ T8372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 21:47:37 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000140)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000740)={0x2}) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, 0x0) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)={0x0, 0x7, 0x4, 0x2000, 0x7, {}, {0x6, 0x0, 0x9, 0x55, 0x0, 0xe9, "bab005ec"}, 0x6, 0x4, @offset=0xffffffff, 0x7c69, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000200)={0x400, 0x8, 0x4, 0x100000, 0x9, {0x0, 0x2710}, {0x2, 0x0, 0x0, 0x40, 0xfb, 0x1, "b284f5a7"}, 0x0, 0x4, @offset=0x1, 0x5, 0x0, r1}) r3 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/mm/transparent_hugepage/khugepaged/scan_sleep_millisecs\x00', 0x1, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x0, 0x0) r5 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_DQBUF(r5, 0xc0585611, &(0x7f00000002c0)={0x100, 0xa, 0x4, 0x10000, 0x8000, {0x0, 0x2710}, {0x4, 0x2, 0xfa, 0x9, 0x7, 0x4, "1a0e515a"}, 0x291d37be, 0x3, @planes=&(0x7f0000000280)={0x3, 0x7, @mem_offset=0xfff, 0xb68}, 0xfffff4ba, 0x0, r2}) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0xb) syz_open_dev$swradio(&(0x7f0000000380)='/dev/swradio#\x00', 0x1, 0x2) write$khugepaged_scan(r3, 0x0, 0x0) syz_open_dev$swradio(&(0x7f0000000340)='/dev/swradio#\x00', 0x0, 0x2) [ 39.447025][ T8372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.459494][ T8372] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.469446][ T8378] device veth0_vlan entered promiscuous mode [ 39.480118][ T8374] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.496674][ T8374] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.510543][ T8374] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.523200][ T8374] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.541191][ T8376] device veth1_macvtap entered promiscuous mode 21:47:37 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000140)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000740)={0x2}) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, 0x0) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)={0x0, 0x7, 0x4, 0x2000, 0x7, {}, {0x6, 0x0, 0x9, 0x55, 0x0, 0xe9, "bab005ec"}, 0x6, 0x4, @offset=0xffffffff, 0x7c69, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000200)={0x400, 0x8, 0x4, 0x100000, 0x9, {0x0, 0x2710}, {0x2, 0x0, 0x0, 0x40, 0xfb, 0x1, "b284f5a7"}, 0x0, 0x4, @offset=0x1, 0x5, 0x0, r1}) r3 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/mm/transparent_hugepage/khugepaged/scan_sleep_millisecs\x00', 0x1, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x0, 0x0) r5 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_DQBUF(r5, 0xc0585611, &(0x7f00000002c0)={0x100, 0xa, 0x4, 0x10000, 0x8000, {0x0, 0x2710}, {0x4, 0x2, 0xfa, 0x9, 0x7, 0x4, "1a0e515a"}, 0x291d37be, 0x3, @planes=&(0x7f0000000280)={0x3, 0x7, @mem_offset=0xfff, 0xb68}, 0xfffff4ba, 0x0, r2}) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0xb) syz_open_dev$swradio(&(0x7f0000000380)='/dev/swradio#\x00', 0x1, 0x2) write$khugepaged_scan(r3, 0x0, 0x0) syz_open_dev$swradio(&(0x7f0000000340)='/dev/swradio#\x00', 0x0, 0x2) [ 39.550049][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 39.559022][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 39.567231][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 39.576304][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 39.591591][ T8372] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 21:47:37 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000140)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000740)={0x2}) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, 0x0) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)={0x0, 0x7, 0x4, 0x2000, 0x7, {}, {0x6, 0x0, 0x9, 0x55, 0x0, 0xe9, "bab005ec"}, 0x6, 0x4, @offset=0xffffffff, 0x7c69, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000200)={0x400, 0x8, 0x4, 0x100000, 0x9, {0x0, 0x2710}, {0x2, 0x0, 0x0, 0x40, 0xfb, 0x1, "b284f5a7"}, 0x0, 0x4, @offset=0x1, 0x5, 0x0, r1}) r3 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/mm/transparent_hugepage/khugepaged/scan_sleep_millisecs\x00', 0x1, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x0, 0x0) r5 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_DQBUF(r5, 0xc0585611, &(0x7f00000002c0)={0x100, 0xa, 0x4, 0x10000, 0x8000, {0x0, 0x2710}, {0x4, 0x2, 0xfa, 0x9, 0x7, 0x4, "1a0e515a"}, 0x291d37be, 0x3, @planes=&(0x7f0000000280)={0x3, 0x7, @mem_offset=0xfff, 0xb68}, 0xfffff4ba, 0x0, r2}) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0xb) syz_open_dev$swradio(&(0x7f0000000380)='/dev/swradio#\x00', 0x1, 0x2) write$khugepaged_scan(r3, 0x0, 0x0) syz_open_dev$swradio(&(0x7f0000000340)='/dev/swradio#\x00', 0x0, 0x2) [ 39.604419][ T8372] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.613363][ T8372] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.632475][ T8372] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.658338][ T8378] device veth1_vlan entered promiscuous mode 21:47:37 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000140)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000740)={0x2}) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, 0x0) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)={0x0, 0x7, 0x4, 0x2000, 0x7, {}, {0x6, 0x0, 0x9, 0x55, 0x0, 0xe9, "bab005ec"}, 0x6, 0x4, @offset=0xffffffff, 0x7c69, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000200)={0x400, 0x8, 0x4, 0x100000, 0x9, {0x0, 0x2710}, {0x2, 0x0, 0x0, 0x40, 0xfb, 0x1, "b284f5a7"}, 0x0, 0x4, @offset=0x1, 0x5, 0x0, r1}) r3 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/mm/transparent_hugepage/khugepaged/scan_sleep_millisecs\x00', 0x1, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x0, 0x0) r5 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_DQBUF(r5, 0xc0585611, &(0x7f00000002c0)={0x100, 0xa, 0x4, 0x10000, 0x8000, {0x0, 0x2710}, {0x4, 0x2, 0xfa, 0x9, 0x7, 0x4, "1a0e515a"}, 0x291d37be, 0x3, @planes=&(0x7f0000000280)={0x3, 0x7, @mem_offset=0xfff, 0xb68}, 0xfffff4ba, 0x0, r2}) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0xb) syz_open_dev$swradio(&(0x7f0000000380)='/dev/swradio#\x00', 0x1, 0x2) write$khugepaged_scan(r3, 0x0, 0x0) syz_open_dev$swradio(&(0x7f0000000340)='/dev/swradio#\x00', 0x0, 0x2) [ 39.720502][ T8376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 39.745808][ T8376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 21:47:37 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000140)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000740)={0x2}) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, 0x0) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)={0x0, 0x7, 0x4, 0x2000, 0x7, {}, {0x6, 0x0, 0x9, 0x55, 0x0, 0xe9, "bab005ec"}, 0x6, 0x4, @offset=0xffffffff, 0x7c69, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000200)={0x400, 0x8, 0x4, 0x100000, 0x9, {0x0, 0x2710}, {0x2, 0x0, 0x0, 0x40, 0xfb, 0x1, "b284f5a7"}, 0x0, 0x4, @offset=0x1, 0x5, 0x0, r1}) r3 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/mm/transparent_hugepage/khugepaged/scan_sleep_millisecs\x00', 0x1, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x0, 0x0) r5 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_DQBUF(r5, 0xc0585611, &(0x7f00000002c0)={0x100, 0xa, 0x4, 0x10000, 0x8000, {0x0, 0x2710}, {0x4, 0x2, 0xfa, 0x9, 0x7, 0x4, "1a0e515a"}, 0x291d37be, 0x3, @planes=&(0x7f0000000280)={0x3, 0x7, @mem_offset=0xfff, 0xb68}, 0xfffff4ba, 0x0, r2}) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0xb) syz_open_dev$swradio(&(0x7f0000000380)='/dev/swradio#\x00', 0x1, 0x2) write$khugepaged_scan(r3, 0x0, 0x0) syz_open_dev$swradio(&(0x7f0000000340)='/dev/swradio#\x00', 0x0, 0x2) [ 39.765121][ T8376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 39.794252][ T8376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.806664][ T8376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 21:47:38 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000140)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000740)={0x2}) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, 0x0) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)={0x0, 0x7, 0x4, 0x2000, 0x7, {}, {0x6, 0x0, 0x9, 0x55, 0x0, 0xe9, "bab005ec"}, 0x6, 0x4, @offset=0xffffffff, 0x7c69, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000200)={0x400, 0x8, 0x4, 0x100000, 0x9, {0x0, 0x2710}, {0x2, 0x0, 0x0, 0x40, 0xfb, 0x1, "b284f5a7"}, 0x0, 0x4, @offset=0x1, 0x5, 0x0, r1}) r3 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/mm/transparent_hugepage/khugepaged/scan_sleep_millisecs\x00', 0x1, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x0, 0x0) r5 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_DQBUF(r5, 0xc0585611, &(0x7f00000002c0)={0x100, 0xa, 0x4, 0x10000, 0x8000, {0x0, 0x2710}, {0x4, 0x2, 0xfa, 0x9, 0x7, 0x4, "1a0e515a"}, 0x291d37be, 0x3, @planes=&(0x7f0000000280)={0x3, 0x7, @mem_offset=0xfff, 0xb68}, 0xfffff4ba, 0x0, r2}) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0xb) syz_open_dev$swradio(&(0x7f0000000380)='/dev/swradio#\x00', 0x1, 0x2) write$khugepaged_scan(r3, 0x0, 0x0) syz_open_dev$swradio(&(0x7f0000000340)='/dev/swradio#\x00', 0x0, 0x2) [ 39.817738][ T8376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.831528][ T8376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 39.849336][ T8376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.866598][ T8376] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.875488][ T9688] Bluetooth: hci0: command 0x040f tx timeout [ 39.917693][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 39.934161][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 39.942978][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 39.954691][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 39.968668][ T8376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 39.982308][ T8376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.993313][ T8376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 40.004754][ T8376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.016856][ T8376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 40.029913][ T8376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.041080][ T9757] Bluetooth: hci1: command 0x040f tx timeout [ 40.042624][ T8376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 40.061094][ T8376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.072831][ T8376] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.092162][ T9688] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 40.105186][ T9688] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 40.115307][ T9688] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 40.124974][ T9688] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 40.135185][ T8376] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.145111][ T8376] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.154904][ T8376] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.164173][ T8376] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.187342][ T8378] device veth0_macvtap entered promiscuous mode [ 40.200710][ T8] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.214397][ T8378] device veth1_macvtap entered promiscuous mode [ 40.243853][ T8] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.257215][ T306] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.273709][ T5] Bluetooth: hci2: command 0x040f tx timeout [ 40.294125][ T8998] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 40.302326][ T306] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.305152][ T8998] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 40.325496][ T8998] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 40.339813][ T306] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.347722][ T8378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 40.359487][ T8] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.360510][ T306] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.374618][ T8] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.376161][ T9692] Bluetooth: hci3: command 0x040f tx timeout [ 40.382932][ T8378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.402378][ T8378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 40.414445][ T8378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.425631][ T8378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 40.436979][ T8378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.447569][ T8378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 40.459608][ T8378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.471078][ T8378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 40.483489][ T8378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.495627][ T8378] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.514529][ T5] Bluetooth: hci4: command 0x040f tx timeout [ 40.515480][ T3131] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 40.530271][ T3131] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 40.542110][ T3131] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 40.556263][ T3131] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 40.579880][ T8378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 40.594103][ T8378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.607080][ T8378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 40.626830][ T8378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.642298][ T8378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 40.653866][ T8378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.664952][ T8378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 40.676962][ T8378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.690405][ T8378] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 40.703861][ T8378] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.715936][ T8378] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.726211][ T8] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.741688][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 40.751386][ T8] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.760091][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 40.770361][ T9568] Bluetooth: hci5: command 0x040f tx timeout [ 40.781634][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 40.805782][ T8378] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.823203][ T8378] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.850266][ T8378] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.869082][ T9820] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 40.893660][ T8378] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.917461][ C1] hrtimer: interrupt took 36469 ns [ 40.942944][ T24] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.989546][ T24] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.012118][ T306] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.031696][ T306] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.071411][ T9836] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.071900][ T8998] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 21:47:39 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000140)={0x0, 0x0, [0x1, 0x0, 0x0, 0x0, 0x0, 0x7fff]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x48}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x2, 0x100000001, 0x0, 0xc5e]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x800008000}, 0x1000, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 41.113383][ T9836] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.121091][ T8998] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 41.145467][ T8998] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 41.226381][ T2992] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.252160][ T2992] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.275541][ T9836] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.285024][ T9683] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 41.307977][ T9836] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 21:47:39 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00', 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)={0x30, r2, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @loopback}]}, 0x30}}, 0x0) [ 41.328754][ T9683] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 21:47:39 executing program 3: r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) write$sysctl(r0, 0x0, 0x0) 21:47:39 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000140)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000740)={0x2}) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, 0x0) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)={0x0, 0x7, 0x4, 0x2000, 0x7, {}, {0x6, 0x0, 0x9, 0x55, 0x0, 0xe9, "bab005ec"}, 0x6, 0x4, @offset=0xffffffff, 0x7c69, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000200)={0x400, 0x8, 0x4, 0x100000, 0x9, {0x0, 0x2710}, {0x2, 0x0, 0x0, 0x40, 0xfb, 0x1, "b284f5a7"}, 0x0, 0x4, @offset=0x1, 0x5, 0x0, r1}) r3 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/mm/transparent_hugepage/khugepaged/scan_sleep_millisecs\x00', 0x1, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x0, 0x0) r5 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_DQBUF(r5, 0xc0585611, &(0x7f00000002c0)={0x100, 0xa, 0x4, 0x10000, 0x8000, {0x0, 0x2710}, {0x4, 0x2, 0xfa, 0x9, 0x7, 0x4, "1a0e515a"}, 0x291d37be, 0x3, @planes=&(0x7f0000000280)={0x3, 0x7, @mem_offset=0xfff, 0xb68}, 0xfffff4ba, 0x0, r2}) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0xb) syz_open_dev$swradio(&(0x7f0000000380)='/dev/swradio#\x00', 0x1, 0x2) write$khugepaged_scan(r3, 0x0, 0x0) syz_open_dev$swradio(&(0x7f0000000340)='/dev/swradio#\x00', 0x0, 0x2) 21:47:39 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)={0x5, 0x2, 0x1100, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x30]}, 0x40) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r0, &(0x7f0000000000), 0x0}, 0x20) 21:47:39 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000140)={0x0, 0x0, [0x1, 0x0, 0x0, 0x0, 0x0, 0x7fff]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x48}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x2, 0x100000001, 0x0, 0xc5e]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x800008000}, 0x1000, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 21:47:39 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f0000000240)="17000000020001000003be8c5ee17688a8003c080303390000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018200000000f5009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba000840024f0298e9e90554232a80e45820b170dfe605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e019b64870000002008b9693f9476c06da0da8", 0xb8) 21:47:39 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00', 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)={0x30, r2, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @loopback}]}, 0x30}}, 0x0) 21:47:39 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f0000000240)="17000000020001000003be8c5ee17688a8003c080303390000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018200000000f5009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba000840024f0298e9e90554232a80e45820b170dfe605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e019b64870000002008b9693f9476c06da0da8", 0xb8) 21:47:39 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00', 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)={0x30, r2, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @loopback}]}, 0x30}}, 0x0) 21:47:39 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)={0x5, 0x2, 0x1100, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x30]}, 0x40) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r0, &(0x7f0000000000), 0x0}, 0x20) 21:47:39 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000140)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000740)={0x2}) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, 0x0) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)={0x0, 0x7, 0x4, 0x2000, 0x7, {}, {0x6, 0x0, 0x9, 0x55, 0x0, 0xe9, "bab005ec"}, 0x6, 0x4, @offset=0xffffffff, 0x7c69, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000200)={0x400, 0x8, 0x4, 0x100000, 0x9, {0x0, 0x2710}, {0x2, 0x0, 0x0, 0x40, 0xfb, 0x1, "b284f5a7"}, 0x0, 0x4, @offset=0x1, 0x5, 0x0, r1}) r3 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/mm/transparent_hugepage/khugepaged/scan_sleep_millisecs\x00', 0x1, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x0, 0x0) r5 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_DQBUF(r5, 0xc0585611, &(0x7f00000002c0)={0x100, 0xa, 0x4, 0x10000, 0x8000, {0x0, 0x2710}, {0x4, 0x2, 0xfa, 0x9, 0x7, 0x4, "1a0e515a"}, 0x291d37be, 0x3, @planes=&(0x7f0000000280)={0x3, 0x7, @mem_offset=0xfff, 0xb68}, 0xfffff4ba, 0x0, r2}) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0xb) syz_open_dev$swradio(&(0x7f0000000380)='/dev/swradio#\x00', 0x1, 0x2) write$khugepaged_scan(r3, 0x0, 0x0) syz_open_dev$swradio(&(0x7f0000000340)='/dev/swradio#\x00', 0x0, 0x2) 21:47:40 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f0000000240)="17000000020001000003be8c5ee17688a8003c080303390000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018200000000f5009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba000840024f0298e9e90554232a80e45820b170dfe605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e019b64870000002008b9693f9476c06da0da8", 0xb8) 21:47:40 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)={0x5, 0x2, 0x1100, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x30]}, 0x40) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r0, &(0x7f0000000000), 0x0}, 0x20) [ 41.963604][ T4812] Bluetooth: hci0: command 0x0419 tx timeout [ 42.126580][ T3583] Bluetooth: hci1: command 0x0419 tx timeout [ 42.353694][ T4812] Bluetooth: hci2: command 0x0419 tx timeout 21:47:40 executing program 3: r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) write$sysctl(r0, 0x0, 0x0) 21:47:40 executing program 2: r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) write$sysctl(r0, 0x0, 0x0) 21:47:40 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00', 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)={0x30, r2, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @loopback}]}, 0x30}}, 0x0) [ 42.433632][ T4812] Bluetooth: hci3: command 0x0419 tx timeout 21:47:40 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000140)={0x0, 0x0, [0x1, 0x0, 0x0, 0x0, 0x0, 0x7fff]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x48}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x2, 0x100000001, 0x0, 0xc5e]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x800008000}, 0x1000, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 21:47:40 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00', 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)={0x30, r2, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @loopback}]}, 0x30}}, 0x0) 21:47:40 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)={0x5, 0x2, 0x1100, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x30]}, 0x40) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r0, &(0x7f0000000000), 0x0}, 0x20) 21:47:40 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00', 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)={0x30, r2, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @loopback}]}, 0x30}}, 0x0) [ 42.593568][ T9692] Bluetooth: hci4: command 0x0419 tx timeout [ 42.652212][ T9923] ================================================================== [ 42.660800][ T9923] BUG: KCSAN: data-race in isolate_migratepages_block / isolate_migratepages_block [ 42.671790][ T9923] [ 42.674880][ T9923] write to 0xffff88813fffbc18 of 8 bytes by task 9922 on cpu 1: [ 42.684945][ T9923] isolate_migratepages_block+0x19d3/0x1c90 [ 42.691383][ T9923] compact_zone+0x1597/0x1e60 [ 42.697808][ T9923] compact_node+0xe4/0x1e0 [ 42.702342][ T9923] sysctl_compaction_handler+0x47/0x90 [ 42.709102][ T9923] proc_sys_call_handler+0x3dd/0x530 [ 42.714921][ T9923] proc_sys_write+0x1e/0x30 [ 42.720373][ T9923] vfs_write+0x6f9/0x7e0 [ 42.726296][ T9923] ksys_write+0xce/0x180 [ 42.730840][ T9923] __x64_sys_write+0x3e/0x50 [ 42.736846][ T9923] do_syscall_64+0x39/0x80 [ 42.741375][ T9923] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 42.747387][ T9923] [ 42.749724][ T9923] read to 0xffff88813fffbc18 of 8 bytes by task 9923 on cpu 0: [ 42.757764][ T9923] isolate_migratepages_block+0x19ac/0x1c90 [ 42.764098][ T9923] compact_zone+0x1597/0x1e60 [ 42.772447][ T9923] compact_node+0xe4/0x1e0 [ 42.801402][ T9923] sysctl_compaction_handler+0x47/0x90 [ 42.807554][ T9923] proc_sys_call_handler+0x3dd/0x530 [ 42.815537][ T9923] proc_sys_write+0x1e/0x30 [ 42.823213][ T9923] vfs_write+0x6f9/0x7e0 [ 42.827790][ T9923] ksys_write+0xce/0x180 [ 42.832197][ T9923] __x64_sys_write+0x3e/0x50 [ 42.837234][ T9923] do_syscall_64+0x39/0x80 [ 42.842917][ T9923] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 42.849489][ T9923] [ 42.852170][ T9923] Reported by Kernel Concurrency Sanitizer on: [ 42.859523][ T9923] CPU: 0 PID: 9923 Comm: syz-executor.3 Not tainted 5.12.0-rc6-syzkaller #0 [ 42.868742][ T9923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 42.879562][ T9923] ================================================================== [ 42.895318][ T4812] Bluetooth: hci5: command 0x0419 tx timeout 21:47:41 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00', 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)={0x30, r2, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @loopback}]}, 0x30}}, 0x0) 21:47:41 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00', 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)={0x30, r2, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @loopback}]}, 0x30}}, 0x0) 21:47:41 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)={0x5, 0x2, 0x1100, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x30]}, 0x40) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r0, &(0x7f0000000000), 0x0}, 0x20) 21:47:41 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000140)={0x0, 0x0, [0x1, 0x0, 0x0, 0x0, 0x0, 0x7fff]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x48}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x2, 0x100000001, 0x0, 0xc5e]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x800008000}, 0x1000, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 21:47:41 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0) preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00', 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)={0x30, r2, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @loopback}]}, 0x30}}, 0x0) 21:47:41 executing program 3: r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) write$sysctl(r0, 0x0, 0x0) 21:47:41 executing program 2: r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) write$sysctl(r0, 0x0, 0x0) 21:47:41 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)={0x5, 0x2, 0x1100, 0x2, 0x0, 0xffffffffffffffff, 0x0, [0x30]}, 0x40) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r0, &(0x7f0000000000), 0x0}, 0x20) 21:47:41 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000140)={0x0, 0x0, [0x1, 0x0, 0x0, 0x0, 0x0, 0x7fff]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x48}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x2, 0x100000001, 0x0, 0xc5e]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x800008000}, 0x1000, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 21:47:41 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000140)={0x0, 0x0, [0x1, 0x0, 0x0, 0x0, 0x0, 0x7fff]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x48}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x2, 0x100000001, 0x0, 0xc5e]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x800008000}, 0x1000, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 21:47:41 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000140)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000740)={0x2}) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, 0x0) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)={0x0, 0x7, 0x4, 0x2000, 0x7, {}, {0x6, 0x0, 0x9, 0x55, 0x0, 0xe9, "bab005ec"}, 0x6, 0x4, @offset=0xffffffff, 0x7c69, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000200)={0x400, 0x8, 0x4, 0x100000, 0x9, {0x0, 0x2710}, {0x2, 0x0, 0x0, 0x40, 0xfb, 0x1, "b284f5a7"}, 0x0, 0x4, @offset=0x1, 0x5, 0x0, r1}) r3 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/mm/transparent_hugepage/khugepaged/scan_sleep_millisecs\x00', 0x1, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x0, 0x0) r5 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_DQBUF(r5, 0xc0585611, &(0x7f00000002c0)={0x100, 0xa, 0x4, 0x10000, 0x8000, {0x0, 0x2710}, {0x4, 0x2, 0xfa, 0x9, 0x7, 0x4, "1a0e515a"}, 0x291d37be, 0x3, @planes=&(0x7f0000000280)={0x3, 0x7, @mem_offset=0xfff, 0xb68}, 0xfffff4ba, 0x0, r2}) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0xb) syz_open_dev$swradio(&(0x7f0000000380)='/dev/swradio#\x00', 0x1, 0x2) write$khugepaged_scan(r3, 0x0, 0x0) syz_open_dev$swradio(&(0x7f0000000340)='/dev/swradio#\x00', 0x0, 0x2) 21:47:41 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000140)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000740)={0x2}) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, 0x0) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)={0x0, 0x7, 0x4, 0x2000, 0x7, {}, {0x6, 0x0, 0x9, 0x55, 0x0, 0xe9, "bab005ec"}, 0x6, 0x4, @offset=0xffffffff, 0x7c69, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000200)={0x400, 0x8, 0x4, 0x100000, 0x9, {0x0, 0x2710}, {0x2, 0x0, 0x0, 0x40, 0xfb, 0x1, "b284f5a7"}, 0x0, 0x4, @offset=0x1, 0x5, 0x0, r1}) r3 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/mm/transparent_hugepage/khugepaged/scan_sleep_millisecs\x00', 0x1, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x0, 0x0) r5 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_DQBUF(r5, 0xc0585611, &(0x7f00000002c0)={0x100, 0xa, 0x4, 0x10000, 0x8000, {0x0, 0x2710}, {0x4, 0x2, 0xfa, 0x9, 0x7, 0x4, "1a0e515a"}, 0x291d37be, 0x3, @planes=&(0x7f0000000280)={0x3, 0x7, @mem_offset=0xfff, 0xb68}, 0xfffff4ba, 0x0, r2}) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0xb) syz_open_dev$swradio(&(0x7f0000000380)='/dev/swradio#\x00', 0x1, 0x2) write$khugepaged_scan(r3, 0x0, 0x0) syz_open_dev$swradio(&(0x7f0000000340)='/dev/swradio#\x00', 0x0, 0x2) 21:47:42 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000140)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000740)={0x2}) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, 0x0) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)={0x0, 0x7, 0x4, 0x2000, 0x7, {}, {0x6, 0x0, 0x9, 0x55, 0x0, 0xe9, "bab005ec"}, 0x6, 0x4, @offset=0xffffffff, 0x7c69, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000200)={0x400, 0x8, 0x4, 0x100000, 0x9, {0x0, 0x2710}, {0x2, 0x0, 0x0, 0x40, 0xfb, 0x1, "b284f5a7"}, 0x0, 0x4, @offset=0x1, 0x5, 0x0, r1}) r3 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/mm/transparent_hugepage/khugepaged/scan_sleep_millisecs\x00', 0x1, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x0, 0x0) r5 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_DQBUF(r5, 0xc0585611, &(0x7f00000002c0)={0x100, 0xa, 0x4, 0x10000, 0x8000, {0x0, 0x2710}, {0x4, 0x2, 0xfa, 0x9, 0x7, 0x4, "1a0e515a"}, 0x291d37be, 0x3, @planes=&(0x7f0000000280)={0x3, 0x7, @mem_offset=0xfff, 0xb68}, 0xfffff4ba, 0x0, r2}) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0xb) syz_open_dev$swradio(&(0x7f0000000380)='/dev/swradio#\x00', 0x1, 0x2) write$khugepaged_scan(r3, 0x0, 0x0) syz_open_dev$swradio(&(0x7f0000000340)='/dev/swradio#\x00', 0x0, 0x2) 21:47:42 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000140)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000740)={0x2}) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, 0x0) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)={0x0, 0x7, 0x4, 0x2000, 0x7, {}, {0x6, 0x0, 0x9, 0x55, 0x0, 0xe9, "bab005ec"}, 0x6, 0x4, @offset=0xffffffff, 0x7c69, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000200)={0x400, 0x8, 0x4, 0x100000, 0x9, {0x0, 0x2710}, {0x2, 0x0, 0x0, 0x40, 0xfb, 0x1, "b284f5a7"}, 0x0, 0x4, @offset=0x1, 0x5, 0x0, r1}) r3 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/mm/transparent_hugepage/khugepaged/scan_sleep_millisecs\x00', 0x1, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x0, 0x0) r5 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_DQBUF(r5, 0xc0585611, &(0x7f00000002c0)={0x100, 0xa, 0x4, 0x10000, 0x8000, {0x0, 0x2710}, {0x4, 0x2, 0xfa, 0x9, 0x7, 0x4, "1a0e515a"}, 0x291d37be, 0x3, @planes=&(0x7f0000000280)={0x3, 0x7, @mem_offset=0xfff, 0xb68}, 0xfffff4ba, 0x0, r2}) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0xb) syz_open_dev$swradio(&(0x7f0000000380)='/dev/swradio#\x00', 0x1, 0x2) write$khugepaged_scan(r3, 0x0, 0x0) syz_open_dev$swradio(&(0x7f0000000340)='/dev/swradio#\x00', 0x0, 0x2) 21:47:42 executing program 2: r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) write$sysctl(r0, 0x0, 0x0) 21:47:42 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000140)={0x0, 0x0, [0x1, 0x0, 0x0, 0x0, 0x0, 0x7fff]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x48}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x2, 0x100000001, 0x0, 0xc5e]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x800008000}, 0x1000, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 21:47:42 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000140)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000740)={0x2}) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, 0x0) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)={0x0, 0x7, 0x4, 0x2000, 0x7, {}, {0x6, 0x0, 0x9, 0x55, 0x0, 0xe9, "bab005ec"}, 0x6, 0x4, @offset=0xffffffff, 0x7c69, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000200)={0x400, 0x8, 0x4, 0x100000, 0x9, {0x0, 0x2710}, {0x2, 0x0, 0x0, 0x40, 0xfb, 0x1, "b284f5a7"}, 0x0, 0x4, @offset=0x1, 0x5, 0x0, r1}) r3 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/mm/transparent_hugepage/khugepaged/scan_sleep_millisecs\x00', 0x1, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x0, 0x0) r5 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_DQBUF(r5, 0xc0585611, &(0x7f00000002c0)={0x100, 0xa, 0x4, 0x10000, 0x8000, {0x0, 0x2710}, {0x4, 0x2, 0xfa, 0x9, 0x7, 0x4, "1a0e515a"}, 0x291d37be, 0x3, @planes=&(0x7f0000000280)={0x3, 0x7, @mem_offset=0xfff, 0xb68}, 0xfffff4ba, 0x0, r2}) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0xb) syz_open_dev$swradio(&(0x7f0000000380)='/dev/swradio#\x00', 0x1, 0x2) write$khugepaged_scan(r3, 0x0, 0x0) syz_open_dev$swradio(&(0x7f0000000340)='/dev/swradio#\x00', 0x0, 0x2) 21:47:42 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000140)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000740)={0x2}) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, 0x0) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)={0x0, 0x7, 0x4, 0x2000, 0x7, {}, {0x6, 0x0, 0x9, 0x55, 0x0, 0xe9, "bab005ec"}, 0x6, 0x4, @offset=0xffffffff, 0x7c69, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000200)={0x400, 0x8, 0x4, 0x100000, 0x9, {0x0, 0x2710}, {0x2, 0x0, 0x0, 0x40, 0xfb, 0x1, "b284f5a7"}, 0x0, 0x4, @offset=0x1, 0x5, 0x0, r1}) r3 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/mm/transparent_hugepage/khugepaged/scan_sleep_millisecs\x00', 0x1, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x0, 0x0) r5 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_DQBUF(r5, 0xc0585611, &(0x7f00000002c0)={0x100, 0xa, 0x4, 0x10000, 0x8000, {0x0, 0x2710}, {0x4, 0x2, 0xfa, 0x9, 0x7, 0x4, "1a0e515a"}, 0x291d37be, 0x3, @planes=&(0x7f0000000280)={0x3, 0x7, @mem_offset=0xfff, 0xb68}, 0xfffff4ba, 0x0, r2}) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0xb) syz_open_dev$swradio(&(0x7f0000000380)='/dev/swradio#\x00', 0x1, 0x2) write$khugepaged_scan(r3, 0x0, 0x0) syz_open_dev$swradio(&(0x7f0000000340)='/dev/swradio#\x00', 0x0, 0x2) 21:47:42 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000140)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000740)={0x2}) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, 0x0) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)={0x0, 0x7, 0x4, 0x2000, 0x7, {}, {0x6, 0x0, 0x9, 0x55, 0x0, 0xe9, "bab005ec"}, 0x6, 0x4, @offset=0xffffffff, 0x7c69, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000200)={0x400, 0x8, 0x4, 0x100000, 0x9, {0x0, 0x2710}, {0x2, 0x0, 0x0, 0x40, 0xfb, 0x1, "b284f5a7"}, 0x0, 0x4, @offset=0x1, 0x5, 0x0, r1}) r3 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/mm/transparent_hugepage/khugepaged/scan_sleep_millisecs\x00', 0x1, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x0, 0x0) r5 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_DQBUF(r5, 0xc0585611, &(0x7f00000002c0)={0x100, 0xa, 0x4, 0x10000, 0x8000, {0x0, 0x2710}, {0x4, 0x2, 0xfa, 0x9, 0x7, 0x4, "1a0e515a"}, 0x291d37be, 0x3, @planes=&(0x7f0000000280)={0x3, 0x7, @mem_offset=0xfff, 0xb68}, 0xfffff4ba, 0x0, r2}) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0xb) syz_open_dev$swradio(&(0x7f0000000380)='/dev/swradio#\x00', 0x1, 0x2) write$khugepaged_scan(r3, 0x0, 0x0) syz_open_dev$swradio(&(0x7f0000000340)='/dev/swradio#\x00', 0x0, 0x2) 21:47:42 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000140)={0x0, 0x0, [0x1, 0x0, 0x0, 0x0, 0x0, 0x7fff]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x48}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x2, 0x100000001, 0x0, 0xc5e]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x800008000}, 0x1000, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 21:47:42 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000140)={0x0, 0x0, [0x1, 0x0, 0x0, 0x0, 0x0, 0x7fff]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x48}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x2, 0x100000001, 0x0, 0xc5e]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x800008000}, 0x1000, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 21:47:42 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000140)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000740)={0x2}) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, 0x0) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)={0x0, 0x7, 0x4, 0x2000, 0x7, {}, {0x6, 0x0, 0x9, 0x55, 0x0, 0xe9, "bab005ec"}, 0x6, 0x4, @offset=0xffffffff, 0x7c69, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000200)={0x400, 0x8, 0x4, 0x100000, 0x9, {0x0, 0x2710}, {0x2, 0x0, 0x0, 0x40, 0xfb, 0x1, "b284f5a7"}, 0x0, 0x4, @offset=0x1, 0x5, 0x0, r1}) r3 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/mm/transparent_hugepage/khugepaged/scan_sleep_millisecs\x00', 0x1, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x0, 0x0) r5 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_DQBUF(r5, 0xc0585611, &(0x7f00000002c0)={0x100, 0xa, 0x4, 0x10000, 0x8000, {0x0, 0x2710}, {0x4, 0x2, 0xfa, 0x9, 0x7, 0x4, "1a0e515a"}, 0x291d37be, 0x3, @planes=&(0x7f0000000280)={0x3, 0x7, @mem_offset=0xfff, 0xb68}, 0xfffff4ba, 0x0, r2}) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0xb) syz_open_dev$swradio(&(0x7f0000000380)='/dev/swradio#\x00', 0x1, 0x2) write$khugepaged_scan(r3, 0x0, 0x0) syz_open_dev$swradio(&(0x7f0000000340)='/dev/swradio#\x00', 0x0, 0x2) 21:47:42 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000140)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000740)={0x2}) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, 0x0) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)={0x0, 0x7, 0x4, 0x2000, 0x7, {}, {0x6, 0x0, 0x9, 0x55, 0x0, 0xe9, "bab005ec"}, 0x6, 0x4, @offset=0xffffffff, 0x7c69, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000200)={0x400, 0x8, 0x4, 0x100000, 0x9, {0x0, 0x2710}, {0x2, 0x0, 0x0, 0x40, 0xfb, 0x1, "b284f5a7"}, 0x0, 0x4, @offset=0x1, 0x5, 0x0, r1}) r3 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/mm/transparent_hugepage/khugepaged/scan_sleep_millisecs\x00', 0x1, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x0, 0x0) r5 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_DQBUF(r5, 0xc0585611, &(0x7f00000002c0)={0x100, 0xa, 0x4, 0x10000, 0x8000, {0x0, 0x2710}, {0x4, 0x2, 0xfa, 0x9, 0x7, 0x4, "1a0e515a"}, 0x291d37be, 0x3, @planes=&(0x7f0000000280)={0x3, 0x7, @mem_offset=0xfff, 0xb68}, 0xfffff4ba, 0x0, r2}) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0xb) syz_open_dev$swradio(&(0x7f0000000380)='/dev/swradio#\x00', 0x1, 0x2) write$khugepaged_scan(r3, 0x0, 0x0) syz_open_dev$swradio(&(0x7f0000000340)='/dev/swradio#\x00', 0x0, 0x2) 21:47:42 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000140)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000740)={0x2}) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, 0x0) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)={0x0, 0x7, 0x4, 0x2000, 0x7, {}, {0x6, 0x0, 0x9, 0x55, 0x0, 0xe9, "bab005ec"}, 0x6, 0x4, @offset=0xffffffff, 0x7c69, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000200)={0x400, 0x8, 0x4, 0x100000, 0x9, {0x0, 0x2710}, {0x2, 0x0, 0x0, 0x40, 0xfb, 0x1, "b284f5a7"}, 0x0, 0x4, @offset=0x1, 0x5, 0x0, r1}) r3 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/mm/transparent_hugepage/khugepaged/scan_sleep_millisecs\x00', 0x1, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x0, 0x0) r5 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_DQBUF(r5, 0xc0585611, &(0x7f00000002c0)={0x100, 0xa, 0x4, 0x10000, 0x8000, {0x0, 0x2710}, {0x4, 0x2, 0xfa, 0x9, 0x7, 0x4, "1a0e515a"}, 0x291d37be, 0x3, @planes=&(0x7f0000000280)={0x3, 0x7, @mem_offset=0xfff, 0xb68}, 0xfffff4ba, 0x0, r2}) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0xb) syz_open_dev$swradio(&(0x7f0000000380)='/dev/swradio#\x00', 0x1, 0x2) write$khugepaged_scan(r3, 0x0, 0x0) syz_open_dev$swradio(&(0x7f0000000340)='/dev/swradio#\x00', 0x0, 0x2) 21:47:42 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000140)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000740)={0x2}) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, 0x0) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)={0x0, 0x7, 0x4, 0x2000, 0x7, {}, {0x6, 0x0, 0x9, 0x55, 0x0, 0xe9, "bab005ec"}, 0x6, 0x4, @offset=0xffffffff, 0x7c69, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000200)={0x400, 0x8, 0x4, 0x100000, 0x9, {0x0, 0x2710}, {0x2, 0x0, 0x0, 0x40, 0xfb, 0x1, "b284f5a7"}, 0x0, 0x4, @offset=0x1, 0x5, 0x0, r1}) r3 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/mm/transparent_hugepage/khugepaged/scan_sleep_millisecs\x00', 0x1, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x0, 0x0) r5 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_DQBUF(r5, 0xc0585611, &(0x7f00000002c0)={0x100, 0xa, 0x4, 0x10000, 0x8000, {0x0, 0x2710}, {0x4, 0x2, 0xfa, 0x9, 0x7, 0x4, "1a0e515a"}, 0x291d37be, 0x3, @planes=&(0x7f0000000280)={0x3, 0x7, @mem_offset=0xfff, 0xb68}, 0xfffff4ba, 0x0, r2}) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0xb) syz_open_dev$swradio(&(0x7f0000000380)='/dev/swradio#\x00', 0x1, 0x2) write$khugepaged_scan(r3, 0x0, 0x0) syz_open_dev$swradio(&(0x7f0000000340)='/dev/swradio#\x00', 0x0, 0x2) 21:47:42 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000140)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000740)={0x2}) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, 0x0) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)={0x0, 0x7, 0x4, 0x2000, 0x7, {}, {0x6, 0x0, 0x9, 0x55, 0x0, 0xe9, "bab005ec"}, 0x6, 0x4, @offset=0xffffffff, 0x7c69, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000200)={0x400, 0x8, 0x4, 0x100000, 0x9, {0x0, 0x2710}, {0x2, 0x0, 0x0, 0x40, 0xfb, 0x1, "b284f5a7"}, 0x0, 0x4, @offset=0x1, 0x5, 0x0, r1}) r3 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/mm/transparent_hugepage/khugepaged/scan_sleep_millisecs\x00', 0x1, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x0, 0x0) r5 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_DQBUF(r5, 0xc0585611, &(0x7f00000002c0)={0x100, 0xa, 0x4, 0x10000, 0x8000, {0x0, 0x2710}, {0x4, 0x2, 0xfa, 0x9, 0x7, 0x4, "1a0e515a"}, 0x291d37be, 0x3, @planes=&(0x7f0000000280)={0x3, 0x7, @mem_offset=0xfff, 0xb68}, 0xfffff4ba, 0x0, r2}) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0xb) syz_open_dev$swradio(&(0x7f0000000380)='/dev/swradio#\x00', 0x1, 0x2) write$khugepaged_scan(r3, 0x0, 0x0) syz_open_dev$swradio(&(0x7f0000000340)='/dev/swradio#\x00', 0x0, 0x2) 21:47:43 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000140)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000740)={0x2}) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, 0x0) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)={0x0, 0x7, 0x4, 0x2000, 0x7, {}, {0x6, 0x0, 0x9, 0x55, 0x0, 0xe9, "bab005ec"}, 0x6, 0x4, @offset=0xffffffff, 0x7c69, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000200)={0x400, 0x8, 0x4, 0x100000, 0x9, {0x0, 0x2710}, {0x2, 0x0, 0x0, 0x40, 0xfb, 0x1, "b284f5a7"}, 0x0, 0x4, @offset=0x1, 0x5, 0x0, r1}) r3 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/mm/transparent_hugepage/khugepaged/scan_sleep_millisecs\x00', 0x1, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x0, 0x0) r5 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_DQBUF(r5, 0xc0585611, &(0x7f00000002c0)={0x100, 0xa, 0x4, 0x10000, 0x8000, {0x0, 0x2710}, {0x4, 0x2, 0xfa, 0x9, 0x7, 0x4, "1a0e515a"}, 0x291d37be, 0x3, @planes=&(0x7f0000000280)={0x3, 0x7, @mem_offset=0xfff, 0xb68}, 0xfffff4ba, 0x0, r2}) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0xb) syz_open_dev$swradio(&(0x7f0000000380)='/dev/swradio#\x00', 0x1, 0x2) write$khugepaged_scan(r3, 0x0, 0x0) syz_open_dev$swradio(&(0x7f0000000340)='/dev/swradio#\x00', 0x0, 0x2) 21:47:43 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000140)={0x0, 0x0, [0x1, 0x0, 0x0, 0x0, 0x0, 0x7fff]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x48}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x2, 0x100000001, 0x0, 0xc5e]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x800008000}, 0x1000, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 21:47:43 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000140)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000740)={0x2}) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, 0x0) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)={0x0, 0x7, 0x4, 0x2000, 0x7, {}, {0x6, 0x0, 0x9, 0x55, 0x0, 0xe9, "bab005ec"}, 0x6, 0x4, @offset=0xffffffff, 0x7c69, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000200)={0x400, 0x8, 0x4, 0x100000, 0x9, {0x0, 0x2710}, {0x2, 0x0, 0x0, 0x40, 0xfb, 0x1, "b284f5a7"}, 0x0, 0x4, @offset=0x1, 0x5, 0x0, r1}) r3 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/mm/transparent_hugepage/khugepaged/scan_sleep_millisecs\x00', 0x1, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x0, 0x0) r5 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_DQBUF(r5, 0xc0585611, &(0x7f00000002c0)={0x100, 0xa, 0x4, 0x10000, 0x8000, {0x0, 0x2710}, {0x4, 0x2, 0xfa, 0x9, 0x7, 0x4, "1a0e515a"}, 0x291d37be, 0x3, @planes=&(0x7f0000000280)={0x3, 0x7, @mem_offset=0xfff, 0xb68}, 0xfffff4ba, 0x0, r2}) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0xb) syz_open_dev$swradio(&(0x7f0000000380)='/dev/swradio#\x00', 0x1, 0x2) write$khugepaged_scan(r3, 0x0, 0x0) syz_open_dev$swradio(&(0x7f0000000340)='/dev/swradio#\x00', 0x0, 0x2) 21:47:43 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000140)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000740)={0x2}) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, 0x0) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)={0x0, 0x7, 0x4, 0x2000, 0x7, {}, {0x6, 0x0, 0x9, 0x55, 0x0, 0xe9, "bab005ec"}, 0x6, 0x4, @offset=0xffffffff, 0x7c69, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000200)={0x400, 0x8, 0x4, 0x100000, 0x9, {0x0, 0x2710}, {0x2, 0x0, 0x0, 0x40, 0xfb, 0x1, "b284f5a7"}, 0x0, 0x4, @offset=0x1, 0x5, 0x0, r1}) r3 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/mm/transparent_hugepage/khugepaged/scan_sleep_millisecs\x00', 0x1, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x0, 0x0) r5 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_DQBUF(r5, 0xc0585611, &(0x7f00000002c0)={0x100, 0xa, 0x4, 0x10000, 0x8000, {0x0, 0x2710}, {0x4, 0x2, 0xfa, 0x9, 0x7, 0x4, "1a0e515a"}, 0x291d37be, 0x3, @planes=&(0x7f0000000280)={0x3, 0x7, @mem_offset=0xfff, 0xb68}, 0xfffff4ba, 0x0, r2}) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0xb) syz_open_dev$swradio(&(0x7f0000000380)='/dev/swradio#\x00', 0x1, 0x2) write$khugepaged_scan(r3, 0x0, 0x0) syz_open_dev$swradio(&(0x7f0000000340)='/dev/swradio#\x00', 0x0, 0x2) 21:47:43 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000140)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000740)={0x2}) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, 0x0) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)={0x0, 0x7, 0x4, 0x2000, 0x7, {}, {0x6, 0x0, 0x9, 0x55, 0x0, 0xe9, "bab005ec"}, 0x6, 0x4, @offset=0xffffffff, 0x7c69, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000200)={0x400, 0x8, 0x4, 0x100000, 0x9, {0x0, 0x2710}, {0x2, 0x0, 0x0, 0x40, 0xfb, 0x1, "b284f5a7"}, 0x0, 0x4, @offset=0x1, 0x5, 0x0, r1}) r3 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/mm/transparent_hugepage/khugepaged/scan_sleep_millisecs\x00', 0x1, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x0, 0x0) r5 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_DQBUF(r5, 0xc0585611, &(0x7f00000002c0)={0x100, 0xa, 0x4, 0x10000, 0x8000, {0x0, 0x2710}, {0x4, 0x2, 0xfa, 0x9, 0x7, 0x4, "1a0e515a"}, 0x291d37be, 0x3, @planes=&(0x7f0000000280)={0x3, 0x7, @mem_offset=0xfff, 0xb68}, 0xfffff4ba, 0x0, r2}) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0xb) syz_open_dev$swradio(&(0x7f0000000380)='/dev/swradio#\x00', 0x1, 0x2) write$khugepaged_scan(r3, 0x0, 0x0) syz_open_dev$swradio(&(0x7f0000000340)='/dev/swradio#\x00', 0x0, 0x2) 21:47:43 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000140)={0x0, 0x0, [0x1, 0x0, 0x0, 0x0, 0x0, 0x7fff]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x48}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x2, 0x100000001, 0x0, 0xc5e]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x800008000}, 0x1000, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 21:47:43 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000140)={0x0, 0x0, [0x1, 0x0, 0x0, 0x0, 0x0, 0x7fff]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a0900000065002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x48}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x2, 0x100000001, 0x0, 0xc5e]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x800008000}, 0x1000, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 21:47:43 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000140)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000740)={0x2}) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, 0x0) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)={0x0, 0x7, 0x4, 0x2000, 0x7, {}, {0x6, 0x0, 0x9, 0x55, 0x0, 0xe9, "bab005ec"}, 0x6, 0x4, @offset=0xffffffff, 0x7c69, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000200)={0x400, 0x8, 0x4, 0x100000, 0x9, {0x0, 0x2710}, {0x2, 0x0, 0x0, 0x40, 0xfb, 0x1, "b284f5a7"}, 0x0, 0x4, @offset=0x1, 0x5, 0x0, r1}) r3 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/mm/transparent_hugepage/khugepaged/scan_sleep_millisecs\x00', 0x1, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x0, 0x0) r5 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_DQBUF(r5, 0xc0585611, &(0x7f00000002c0)={0x100, 0xa, 0x4, 0x10000, 0x8000, {0x0, 0x2710}, {0x4, 0x2, 0xfa, 0x9, 0x7, 0x4, "1a0e515a"}, 0x291d37be, 0x3, @planes=&(0x7f0000000280)={0x3, 0x7, @mem_offset=0xfff, 0xb68}, 0xfffff4ba, 0x0, r2}) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0xb) syz_open_dev$swradio(&(0x7f0000000380)='/dev/swradio#\x00', 0x1, 0x2) write$khugepaged_scan(r3, 0x0, 0x0) syz_open_dev$swradio(&(0x7f0000000340)='/dev/swradio#\x00', 0x0, 0x2) 21:47:43 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000140)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000740)={0x2}) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, 0x0) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)={0x0, 0x7, 0x4, 0x2000, 0x7, {}, {0x6, 0x0, 0x9, 0x55, 0x0, 0xe9, "bab005ec"}, 0x6, 0x4, @offset=0xffffffff, 0x7c69, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000200)={0x400, 0x8, 0x4, 0x100000, 0x9, {0x0, 0x2710}, {0x2, 0x0, 0x0, 0x40, 0xfb, 0x1, "b284f5a7"}, 0x0, 0x4, @offset=0x1, 0x5, 0x0, r1}) r3 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/mm/transparent_hugepage/khugepaged/scan_sleep_millisecs\x00', 0x1, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x0, 0x0) r5 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_DQBUF(r5, 0xc0585611, &(0x7f00000002c0)={0x100, 0xa, 0x4, 0x10000, 0x8000, {0x0, 0x2710}, {0x4, 0x2, 0xfa, 0x9, 0x7, 0x4, "1a0e515a"}, 0x291d37be, 0x3, @planes=&(0x7f0000000280)={0x3, 0x7, @mem_offset=0xfff, 0xb68}, 0xfffff4ba, 0x0, r2}) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0xb) syz_open_dev$swradio(&(0x7f0000000380)='/dev/swradio#\x00', 0x1, 0x2) write$khugepaged_scan(r3, 0x0, 0x0) syz_open_dev$swradio(&(0x7f0000000340)='/dev/swradio#\x00', 0x0, 0x2) 21:47:43 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000140)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000740)={0x2}) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, 0x0) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)={0x0, 0x7, 0x4, 0x2000, 0x7, {}, {0x6, 0x0, 0x9, 0x55, 0x0, 0xe9, "bab005ec"}, 0x6, 0x4, @offset=0xffffffff, 0x7c69, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000200)={0x400, 0x8, 0x4, 0x100000, 0x9, {0x0, 0x2710}, {0x2, 0x0, 0x0, 0x40, 0xfb, 0x1, "b284f5a7"}, 0x0, 0x4, @offset=0x1, 0x5, 0x0, r1}) r3 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/mm/transparent_hugepage/khugepaged/scan_sleep_millisecs\x00', 0x1, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x0, 0x0) r5 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_DQBUF(r5, 0xc0585611, &(0x7f00000002c0)={0x100, 0xa, 0x4, 0x10000, 0x8000, {0x0, 0x2710}, {0x4, 0x2, 0xfa, 0x9, 0x7, 0x4, "1a0e515a"}, 0x291d37be, 0x3, @planes=&(0x7f0000000280)={0x3, 0x7, @mem_offset=0xfff, 0xb68}, 0xfffff4ba, 0x0, r2}) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0xb) syz_open_dev$swradio(&(0x7f0000000380)='/dev/swradio#\x00', 0x1, 0x2) write$khugepaged_scan(r3, 0x0, 0x0) syz_open_dev$swradio(&(0x7f0000000340)='/dev/swradio#\x00', 0x0, 0x2) 21:47:43 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000140)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000740)={0x2}) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, 0x0) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)={0x0, 0x7, 0x4, 0x2000, 0x7, {}, {0x6, 0x0, 0x9, 0x55, 0x0, 0xe9, "bab005ec"}, 0x6, 0x4, @offset=0xffffffff, 0x7c69, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000200)={0x400, 0x8, 0x4, 0x100000, 0x9, {0x0, 0x2710}, {0x2, 0x0, 0x0, 0x40, 0xfb, 0x1, "b284f5a7"}, 0x0, 0x4, @offset=0x1, 0x5, 0x0, r1}) r3 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/mm/transparent_hugepage/khugepaged/scan_sleep_millisecs\x00', 0x1, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x0, 0x0) r5 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_DQBUF(r5, 0xc0585611, &(0x7f00000002c0)={0x100, 0xa, 0x4, 0x10000, 0x8000, {0x0, 0x2710}, {0x4, 0x2, 0xfa, 0x9, 0x7, 0x4, "1a0e515a"}, 0x291d37be, 0x3, @planes=&(0x7f0000000280)={0x3, 0x7, @mem_offset=0xfff, 0xb68}, 0xfffff4ba, 0x0, r2}) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0xb) syz_open_dev$swradio(&(0x7f0000000380)='/dev/swradio#\x00', 0x1, 0x2) write$khugepaged_scan(r3, 0x0, 0x0) syz_open_dev$swradio(&(0x7f0000000340)='/dev/swradio#\x00', 0x0, 0x2) 21:47:43 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000140)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000740)={0x2}) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, 0x0) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)={0x0, 0x7, 0x4, 0x2000, 0x7, {}, {0x6, 0x0, 0x9, 0x55, 0x0, 0xe9, "bab005ec"}, 0x6, 0x4, @offset=0xffffffff, 0x7c69, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000200)={0x400, 0x8, 0x4, 0x100000, 0x9, {0x0, 0x2710}, {0x2, 0x0, 0x0, 0x40, 0xfb, 0x1, "b284f5a7"}, 0x0, 0x4, @offset=0x1, 0x5, 0x0, r1}) r3 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/mm/transparent_hugepage/khugepaged/scan_sleep_millisecs\x00', 0x1, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x0, 0x0) r5 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_DQBUF(r5, 0xc0585611, &(0x7f00000002c0)={0x100, 0xa, 0x4, 0x10000, 0x8000, {0x0, 0x2710}, {0x4, 0x2, 0xfa, 0x9, 0x7, 0x4, "1a0e515a"}, 0x291d37be, 0x3, @planes=&(0x7f0000000280)={0x3, 0x7, @mem_offset=0xfff, 0xb68}, 0xfffff4ba, 0x0, r2}) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0xb) syz_open_dev$swradio(&(0x7f0000000380)='/dev/swradio#\x00', 0x1, 0x2) write$khugepaged_scan(r3, 0x0, 0x0) syz_open_dev$swradio(&(0x7f0000000340)='/dev/swradio#\x00', 0x0, 0x2) 21:47:43 executing program 2: r0 = syz_open_dev$swradio(&(0x7f0000000140)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000740)={0x2}) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, 0x0) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)={0x0, 0x7, 0x4, 0x2000, 0x7, {}, {0x6, 0x0, 0x9, 0x55, 0x0, 0xe9, "bab005ec"}, 0x6, 0x4, @offset=0xffffffff, 0x7c69, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000200)={0x400, 0x8, 0x4, 0x100000, 0x9, {0x0, 0x2710}, {0x2, 0x0, 0x0, 0x40, 0xfb, 0x1, "b284f5a7"}, 0x0, 0x4, @offset=0x1, 0x5, 0x0, r1}) r3 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/mm/transparent_hugepage/khugepaged/scan_sleep_millisecs\x00', 0x1, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x0, 0x0) r5 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_DQBUF(r5, 0xc0585611, &(0x7f00000002c0)={0x100, 0xa, 0x4, 0x10000, 0x8000, {0x0, 0x2710}, {0x4, 0x2, 0xfa, 0x9, 0x7, 0x4, "1a0e515a"}, 0x291d37be, 0x3, @planes=&(0x7f0000000280)={0x3, 0x7, @mem_offset=0xfff, 0xb68}, 0xfffff4ba, 0x0, r2}) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0xb) syz_open_dev$swradio(&(0x7f0000000380)='/dev/swradio#\x00', 0x1, 0x2) write$khugepaged_scan(r3, 0x0, 0x0) syz_open_dev$swradio(&(0x7f0000000340)='/dev/swradio#\x00', 0x0, 0x2) 21:47:44 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x4040012) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000002c0)={r2}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f0000001840)=ANY=[@ANYRES64=r2, @ANYBLOB="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"]) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='maps\x00') r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180)='nl80211\x00', r3) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r4, 0x400, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void, @val={0xc, 0x99, {0x0, 0x1d}}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x8810) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], 0x1}) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='maps\x00') preadv(r6, &(0x7f00000017c0)=[{&(0x7f0000000440)=""/70, 0x46}, {&(0x7f00000004c0)=""/216, 0xd8}, {&(0x7f00000005c0)=""/119, 0x77}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000001640)=""/85, 0x55}, {&(0x7f00000016c0)=""/243, 0xf3}], 0x6, 0x6fe, 0x6c) 21:47:44 executing program 4: r0 = syz_open_dev$swradio(&(0x7f0000000140)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000740)={0x2}) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, 0x0) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)={0x0, 0x7, 0x4, 0x2000, 0x7, {}, {0x6, 0x0, 0x9, 0x55, 0x0, 0xe9, "bab005ec"}, 0x6, 0x4, @offset=0xffffffff, 0x7c69, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000200)={0x400, 0x8, 0x4, 0x100000, 0x9, {0x0, 0x2710}, {0x2, 0x0, 0x0, 0x40, 0xfb, 0x1, "b284f5a7"}, 0x0, 0x4, @offset=0x1, 0x5, 0x0, r1}) r3 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/mm/transparent_hugepage/khugepaged/scan_sleep_millisecs\x00', 0x1, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x0, 0x0) r5 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_DQBUF(r5, 0xc0585611, &(0x7f00000002c0)={0x100, 0xa, 0x4, 0x10000, 0x8000, {0x0, 0x2710}, {0x4, 0x2, 0xfa, 0x9, 0x7, 0x4, "1a0e515a"}, 0x291d37be, 0x3, @planes=&(0x7f0000000280)={0x3, 0x7, @mem_offset=0xfff, 0xb68}, 0xfffff4ba, 0x0, r2}) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0xb) syz_open_dev$swradio(&(0x7f0000000380)='/dev/swradio#\x00', 0x1, 0x2) write$khugepaged_scan(r3, 0x0, 0x0) syz_open_dev$swradio(&(0x7f0000000340)='/dev/swradio#\x00', 0x0, 0x2) 21:47:44 executing program 3: r0 = syz_open_dev$swradio(&(0x7f0000000140)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000740)={0x2}) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, 0x0) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)={0x0, 0x7, 0x4, 0x2000, 0x7, {}, {0x6, 0x0, 0x9, 0x55, 0x0, 0xe9, "bab005ec"}, 0x6, 0x4, @offset=0xffffffff, 0x7c69, 0x0, 0xffffffffffffffff}) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000200)={0x400, 0x8, 0x4, 0x100000, 0x9, {0x0, 0x2710}, {0x2, 0x0, 0x0, 0x40, 0xfb, 0x1, "b284f5a7"}, 0x0, 0x4, @offset=0x1, 0x5, 0x0, r1}) r3 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/mm/transparent_hugepage/khugepaged/scan_sleep_millisecs\x00', 0x1, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x0, 0x0) r5 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_DQBUF(r5, 0xc0585611, &(0x7f00000002c0)={0x100, 0xa, 0x4, 0x10000, 0x8000, {0x0, 0x2710}, {0x4, 0x2, 0xfa, 0x9, 0x7, 0x4, "1a0e515a"}, 0x291d37be, 0x3, @planes=&(0x7f0000000280)={0x3, 0x7, @mem_offset=0xfff, 0xb68}, 0xfffff4ba, 0x0, r2}) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0xb) syz_open_dev$swradio(&(0x7f0000000380)='/dev/swradio#\x00', 0x1, 0x2) write$khugepaged_scan(r3, 0x0, 0x0) syz_open_dev$swradio(&(0x7f0000000340)='/dev/swradio#\x00', 0x0, 0x2) 21:47:44 executing program 0: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002000)='fuse\x00', 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000002000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) unlink(&(0x7f0000004200)='./file0/file0\x00') chmod(&(0x7f0000002040)='./file0\x00', 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x3) 21:47:44 executing program 0: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002000)='fuse\x00', 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000002000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) unlink(&(0x7f0000004200)='./file0/file0\x00') chmod(&(0x7f0000002040)='./file0\x00', 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x3) 21:47:44 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='coredump_filter\x00') read$usbmon(r0, &(0x7f00000002c0)=""/180, 0xb4) 21:47:44 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340)='/dev/snd/timer\x00', 0x0) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x3) write$binfmt_script(r1, 0x0, 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x5, 0x70, 0x80, 0x0, 0x9, 0x80, 0x0, 0x9a, 0x82e, 0xa, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000100)}, 0x820, 0xfff7ffffffffff7f, 0x8, 0x0, 0xfffffffffffffff7, 0x3ff, 0x3ff}, 0x0, 0xd, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0xff, 0x8, 0x1, 0xfc, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0xf6, 0x0, @perf_config_ext={0x5, 0xfa4}, 0x40080, 0x8b, 0x8, 0x9, 0x0, 0x8, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f00000003c0)='/dev/vcsa#\x00', 0x200, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0xa) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000140)={{0x2, 0x3, 0xab0, 0x1, 0x7}}) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) pipe(&(0x7f0000000380)) 21:47:44 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000ac0)='NLBL_MGMT\x00', r1) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000440)={&(0x7f0000000380), 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, r2, 0x123}, 0x14}}, 0x0) 21:47:44 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x4040012) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000002c0)={r2}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f0000001840)=ANY=[@ANYRES64=r2, @ANYBLOB="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"]) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='maps\x00') r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180)='nl80211\x00', r3) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r4, 0x400, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void, @val={0xc, 0x99, {0x0, 0x1d}}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x8810) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], 0x1}) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='maps\x00') preadv(r6, &(0x7f00000017c0)=[{&(0x7f0000000440)=""/70, 0x46}, {&(0x7f00000004c0)=""/216, 0xd8}, {&(0x7f00000005c0)=""/119, 0x77}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000001640)=""/85, 0x55}, {&(0x7f00000016c0)=""/243, 0xf3}], 0x6, 0x6fe, 0x6c) 21:47:44 executing program 1: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002000)='fuse\x00', 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000002000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) unlink(&(0x7f0000004200)='./file0/file0\x00') chmod(&(0x7f0000002040)='./file0\x00', 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x3) 21:47:44 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='coredump_filter\x00') read$usbmon(r0, &(0x7f00000002c0)=""/180, 0xb4) 21:47:44 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000ac0)='NLBL_MGMT\x00', r1) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000440)={&(0x7f0000000380), 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, r2, 0x123}, 0x14}}, 0x0) 21:47:44 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x4040012) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000002c0)={r2}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f0000001840)=ANY=[@ANYRES64=r2, @ANYBLOB="0300000000000000040000000000000007000000000000001f0000000000000004000000000000000100000000000000080000e746aa26ae3909b30004000000060000000000000007000000000000000700000000000000a1ad596500000000380000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000b41b3718c0233e064f194f02ef423301a1f540f99525814129142ec71119f83502983bd7be220bbd770000000000000000006208c52835bdcee6d756730e9d54913bc700e52526e66a6d0412f3337f93935ce1537e8939f1417dd5801f9c425dd2e90c5d19547c8e75d9bac85ff0924af775"]) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='maps\x00') r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180)='nl80211\x00', r3) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r4, 0x400, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void, @val={0xc, 0x99, {0x0, 0x1d}}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x8810) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], 0x1}) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='maps\x00') preadv(r6, &(0x7f00000017c0)=[{&(0x7f0000000440)=""/70, 0x46}, {&(0x7f00000004c0)=""/216, 0xd8}, {&(0x7f00000005c0)=""/119, 0x77}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000001640)=""/85, 0x55}, {&(0x7f00000016c0)=""/243, 0xf3}], 0x6, 0x6fe, 0x6c) 21:47:44 executing program 1: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002000)='fuse\x00', 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000002000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) unlink(&(0x7f0000004200)='./file0/file0\x00') chmod(&(0x7f0000002040)='./file0\x00', 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x3) 21:47:44 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='coredump_filter\x00') read$usbmon(r0, &(0x7f00000002c0)=""/180, 0xb4) 21:47:44 executing program 0: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002000)='fuse\x00', 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000002000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) unlink(&(0x7f0000004200)='./file0/file0\x00') chmod(&(0x7f0000002040)='./file0\x00', 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x3) 21:47:44 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000ac0)='NLBL_MGMT\x00', r1) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000440)={&(0x7f0000000380), 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, r2, 0x123}, 0x14}}, 0x0) 21:47:44 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x4040012) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000002c0)={r2}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f0000001840)=ANY=[@ANYRES64=r2, @ANYBLOB="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"]) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='maps\x00') r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180)='nl80211\x00', r3) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r4, 0x400, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void, @val={0xc, 0x99, {0x0, 0x1d}}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x8810) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0], 0x1}) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='maps\x00') preadv(r6, &(0x7f00000017c0)=[{&(0x7f0000000440)=""/70, 0x46}, {&(0x7f00000004c0)=""/216, 0xd8}, {&(0x7f00000005c0)=""/119, 0x77}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000001640)=""/85, 0x55}, {&(0x7f00000016c0)=""/243, 0xf3}], 0x6, 0x6fe, 0x6c) 21:47:45 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340)='/dev/snd/timer\x00', 0x0) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x3) write$binfmt_script(r1, 0x0, 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x5, 0x70, 0x80, 0x0, 0x9, 0x80, 0x0, 0x9a, 0x82e, 0xa, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000100)}, 0x820, 0xfff7ffffffffff7f, 0x8, 0x0, 0xfffffffffffffff7, 0x3ff, 0x3ff}, 0x0, 0xd, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0xff, 0x8, 0x1, 0xfc, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0xf6, 0x0, @perf_config_ext={0x5, 0xfa4}, 0x40080, 0x8b, 0x8, 0x9, 0x0, 0x8, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f00000003c0)='/dev/vcsa#\x00', 0x200, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0xa) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000140)={{0x2, 0x3, 0xab0, 0x1, 0x7}}) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) pipe(&(0x7f0000000380)) 21:47:45 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='coredump_filter\x00') read$usbmon(r0, &(0x7f00000002c0)=""/180, 0xb4) 21:47:45 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000ac0)='NLBL_MGMT\x00', r1) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000440)={&(0x7f0000000380), 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, r2, 0x123}, 0x14}}, 0x0) 21:47:45 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000ac0)='NLBL_MGMT\x00', r1) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000440)={&(0x7f0000000380), 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, r2, 0x123}, 0x14}}, 0x0) 21:47:45 executing program 0: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002000)='fuse\x00', 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000002000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) unlink(&(0x7f0000004200)='./file0/file0\x00') chmod(&(0x7f0000002040)='./file0\x00', 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x3) 21:47:45 executing program 1: mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002000)='fuse\x00', 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000002000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) unlink(&(0x7f0000004200)='./file0/file0\x00') chmod(&(0x7f0000002040)='./file0\x00', 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x3) 21:47:45 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340)='/dev/snd/timer\x00', 0x0) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x3) write$binfmt_script(r1, 0x0, 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x5, 0x70, 0x80, 0x0, 0x9, 0x80, 0x0, 0x9a, 0x82e, 0xa, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000100)}, 0x820, 0xfff7ffffffffff7f, 0x8, 0x0, 0xfffffffffffffff7, 0x3ff, 0x3ff}, 0x0, 0xd, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0xff, 0x8, 0x1, 0xfc, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0xf6, 0x0, @perf_config_ext={0x5, 0xfa4}, 0x40080, 0x8b, 0x8, 0x9, 0x0, 0x8, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f00000003c0)='/dev/vcsa#\x00', 0x200, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0xa) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000140)={{0x2, 0x3, 0xab0, 0x1, 0x7}}) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) pipe(&(0x7f0000000380)) 21:47:45 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000ac0)='NLBL_MGMT\x00', r1) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000440)={&(0x7f0000000380), 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, r2, 0x123}, 0x14}}, 0x0) 21:47:45 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340)='/dev/snd/timer\x00', 0x0) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x3) write$binfmt_script(r1, 0x0, 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x5, 0x70, 0x80, 0x0, 0x9, 0x80, 0x0, 0x9a, 0x82e, 0xa, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000100)}, 0x820, 0xfff7ffffffffff7f, 0x8, 0x0, 0xfffffffffffffff7, 0x3ff, 0x3ff}, 0x0, 0xd, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0xff, 0x8, 0x1, 0xfc, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0xf6, 0x0, @perf_config_ext={0x5, 0xfa4}, 0x40080, 0x8b, 0x8, 0x9, 0x0, 0x8, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f00000003c0)='/dev/vcsa#\x00', 0x200, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0xa) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000140)={{0x2, 0x3, 0xab0, 0x1, 0x7}}) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) pipe(&(0x7f0000000380)) 21:47:46 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000ac0)='NLBL_MGMT\x00', r1) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000440)={&(0x7f0000000380), 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, r2, 0x123}, 0x14}}, 0x0) 21:47:46 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340)='/dev/snd/timer\x00', 0x0) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x3) write$binfmt_script(r1, 0x0, 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x5, 0x70, 0x80, 0x0, 0x9, 0x80, 0x0, 0x9a, 0x82e, 0xa, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000100)}, 0x820, 0xfff7ffffffffff7f, 0x8, 0x0, 0xfffffffffffffff7, 0x3ff, 0x3ff}, 0x0, 0xd, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0xff, 0x8, 0x1, 0xfc, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0xf6, 0x0, @perf_config_ext={0x5, 0xfa4}, 0x40080, 0x8b, 0x8, 0x9, 0x0, 0x8, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f00000003c0)='/dev/vcsa#\x00', 0x200, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0xa) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000140)={{0x2, 0x3, 0xab0, 0x1, 0x7}}) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) pipe(&(0x7f0000000380)) 21:47:46 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340)='/dev/snd/timer\x00', 0x0) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x3) write$binfmt_script(r1, 0x0, 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x5, 0x70, 0x80, 0x0, 0x9, 0x80, 0x0, 0x9a, 0x82e, 0xa, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000100)}, 0x820, 0xfff7ffffffffff7f, 0x8, 0x0, 0xfffffffffffffff7, 0x3ff, 0x3ff}, 0x0, 0xd, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0xff, 0x8, 0x1, 0xfc, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0xf6, 0x0, @perf_config_ext={0x5, 0xfa4}, 0x40080, 0x8b, 0x8, 0x9, 0x0, 0x8, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f00000003c0)='/dev/vcsa#\x00', 0x200, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0xa) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000140)={{0x2, 0x3, 0xab0, 0x1, 0x7}}) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) pipe(&(0x7f0000000380)) 21:47:46 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340)='/dev/snd/timer\x00', 0x0) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x3) write$binfmt_script(r1, 0x0, 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x5, 0x70, 0x80, 0x0, 0x9, 0x80, 0x0, 0x9a, 0x82e, 0xa, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000100)}, 0x820, 0xfff7ffffffffff7f, 0x8, 0x0, 0xfffffffffffffff7, 0x3ff, 0x3ff}, 0x0, 0xd, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0xff, 0x8, 0x1, 0xfc, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0xf6, 0x0, @perf_config_ext={0x5, 0xfa4}, 0x40080, 0x8b, 0x8, 0x9, 0x0, 0x8, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f00000003c0)='/dev/vcsa#\x00', 0x200, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0xa) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000140)={{0x2, 0x3, 0xab0, 0x1, 0x7}}) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) pipe(&(0x7f0000000380)) 21:47:46 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340)='/dev/snd/timer\x00', 0x0) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x3) write$binfmt_script(r1, 0x0, 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x5, 0x70, 0x80, 0x0, 0x9, 0x80, 0x0, 0x9a, 0x82e, 0xa, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000100)}, 0x820, 0xfff7ffffffffff7f, 0x8, 0x0, 0xfffffffffffffff7, 0x3ff, 0x3ff}, 0x0, 0xd, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0xff, 0x8, 0x1, 0xfc, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0xf6, 0x0, @perf_config_ext={0x5, 0xfa4}, 0x40080, 0x8b, 0x8, 0x9, 0x0, 0x8, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f00000003c0)='/dev/vcsa#\x00', 0x200, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0xa) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000140)={{0x2, 0x3, 0xab0, 0x1, 0x7}}) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) pipe(&(0x7f0000000380)) 21:47:46 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340)='/dev/snd/timer\x00', 0x0) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x3) write$binfmt_script(r1, 0x0, 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x5, 0x70, 0x80, 0x0, 0x9, 0x80, 0x0, 0x9a, 0x82e, 0xa, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000100)}, 0x820, 0xfff7ffffffffff7f, 0x8, 0x0, 0xfffffffffffffff7, 0x3ff, 0x3ff}, 0x0, 0xd, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0xff, 0x8, 0x1, 0xfc, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0xf6, 0x0, @perf_config_ext={0x5, 0xfa4}, 0x40080, 0x8b, 0x8, 0x9, 0x0, 0x8, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f00000003c0)='/dev/vcsa#\x00', 0x200, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0xa) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000140)={{0x2, 0x3, 0xab0, 0x1, 0x7}}) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) pipe(&(0x7f0000000380)) 21:47:46 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340)='/dev/snd/timer\x00', 0x0) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x3) write$binfmt_script(r1, 0x0, 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x5, 0x70, 0x80, 0x0, 0x9, 0x80, 0x0, 0x9a, 0x82e, 0xa, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000100)}, 0x820, 0xfff7ffffffffff7f, 0x8, 0x0, 0xfffffffffffffff7, 0x3ff, 0x3ff}, 0x0, 0xd, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0xff, 0x8, 0x1, 0xfc, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0xf6, 0x0, @perf_config_ext={0x5, 0xfa4}, 0x40080, 0x8b, 0x8, 0x9, 0x0, 0x8, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f00000003c0)='/dev/vcsa#\x00', 0x200, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0xa) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000140)={{0x2, 0x3, 0xab0, 0x1, 0x7}}) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) pipe(&(0x7f0000000380)) 21:47:46 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340)='/dev/snd/timer\x00', 0x0) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x3) write$binfmt_script(r1, 0x0, 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x5, 0x70, 0x80, 0x0, 0x9, 0x80, 0x0, 0x9a, 0x82e, 0xa, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000100)}, 0x820, 0xfff7ffffffffff7f, 0x8, 0x0, 0xfffffffffffffff7, 0x3ff, 0x3ff}, 0x0, 0xd, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0xff, 0x8, 0x1, 0xfc, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0xf6, 0x0, @perf_config_ext={0x5, 0xfa4}, 0x40080, 0x8b, 0x8, 0x9, 0x0, 0x8, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f00000003c0)='/dev/vcsa#\x00', 0x200, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0xa) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000140)={{0x2, 0x3, 0xab0, 0x1, 0x7}}) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) pipe(&(0x7f0000000380)) 21:47:46 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340)='/dev/snd/timer\x00', 0x0) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x3) write$binfmt_script(r1, 0x0, 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x5, 0x70, 0x80, 0x0, 0x9, 0x80, 0x0, 0x9a, 0x82e, 0xa, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000100)}, 0x820, 0xfff7ffffffffff7f, 0x8, 0x0, 0xfffffffffffffff7, 0x3ff, 0x3ff}, 0x0, 0xd, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0xff, 0x8, 0x1, 0xfc, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0xf6, 0x0, @perf_config_ext={0x5, 0xfa4}, 0x40080, 0x8b, 0x8, 0x9, 0x0, 0x8, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f00000003c0)='/dev/vcsa#\x00', 0x200, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0xa) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000140)={{0x2, 0x3, 0xab0, 0x1, 0x7}}) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) pipe(&(0x7f0000000380)) 21:47:46 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340)='/dev/snd/timer\x00', 0x0) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x3) write$binfmt_script(r1, 0x0, 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x5, 0x70, 0x80, 0x0, 0x9, 0x80, 0x0, 0x9a, 0x82e, 0xa, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000100)}, 0x820, 0xfff7ffffffffff7f, 0x8, 0x0, 0xfffffffffffffff7, 0x3ff, 0x3ff}, 0x0, 0xd, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0xff, 0x8, 0x1, 0xfc, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0xf6, 0x0, @perf_config_ext={0x5, 0xfa4}, 0x40080, 0x8b, 0x8, 0x9, 0x0, 0x8, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f00000003c0)='/dev/vcsa#\x00', 0x200, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0xa) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000140)={{0x2, 0x3, 0xab0, 0x1, 0x7}}) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) pipe(&(0x7f0000000380)) 21:47:46 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340)='/dev/snd/timer\x00', 0x0) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x3) write$binfmt_script(r1, 0x0, 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x5, 0x70, 0x80, 0x0, 0x9, 0x80, 0x0, 0x9a, 0x82e, 0xa, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000100)}, 0x820, 0xfff7ffffffffff7f, 0x8, 0x0, 0xfffffffffffffff7, 0x3ff, 0x3ff}, 0x0, 0xd, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0xff, 0x8, 0x1, 0xfc, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0xf6, 0x0, @perf_config_ext={0x5, 0xfa4}, 0x40080, 0x8b, 0x8, 0x9, 0x0, 0x8, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f00000003c0)='/dev/vcsa#\x00', 0x200, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0xa) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000140)={{0x2, 0x3, 0xab0, 0x1, 0x7}}) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) pipe(&(0x7f0000000380)) 21:47:46 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340)='/dev/snd/timer\x00', 0x0) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x3) write$binfmt_script(r1, 0x0, 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x5, 0x70, 0x80, 0x0, 0x9, 0x80, 0x0, 0x9a, 0x82e, 0xa, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000100)}, 0x820, 0xfff7ffffffffff7f, 0x8, 0x0, 0xfffffffffffffff7, 0x3ff, 0x3ff}, 0x0, 0xd, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0xff, 0x8, 0x1, 0xfc, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0xf6, 0x0, @perf_config_ext={0x5, 0xfa4}, 0x40080, 0x8b, 0x8, 0x9, 0x0, 0x8, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f00000003c0)='/dev/vcsa#\x00', 0x200, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0xa) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000140)={{0x2, 0x3, 0xab0, 0x1, 0x7}}) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) pipe(&(0x7f0000000380)) 21:47:46 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340)='/dev/snd/timer\x00', 0x0) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x3) write$binfmt_script(r1, 0x0, 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x5, 0x70, 0x80, 0x0, 0x9, 0x80, 0x0, 0x9a, 0x82e, 0xa, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000100)}, 0x820, 0xfff7ffffffffff7f, 0x8, 0x0, 0xfffffffffffffff7, 0x3ff, 0x3ff}, 0x0, 0xd, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0xff, 0x8, 0x1, 0xfc, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0xf6, 0x0, @perf_config_ext={0x5, 0xfa4}, 0x40080, 0x8b, 0x8, 0x9, 0x0, 0x8, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f00000003c0)='/dev/vcsa#\x00', 0x200, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0xa) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000140)={{0x2, 0x3, 0xab0, 0x1, 0x7}}) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) pipe(&(0x7f0000000380)) 21:47:46 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340)='/dev/snd/timer\x00', 0x0) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x3) write$binfmt_script(r1, 0x0, 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x5, 0x70, 0x80, 0x0, 0x9, 0x80, 0x0, 0x9a, 0x82e, 0xa, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000100)}, 0x820, 0xfff7ffffffffff7f, 0x8, 0x0, 0xfffffffffffffff7, 0x3ff, 0x3ff}, 0x0, 0xd, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0xff, 0x8, 0x1, 0xfc, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0xf6, 0x0, @perf_config_ext={0x5, 0xfa4}, 0x40080, 0x8b, 0x8, 0x9, 0x0, 0x8, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f00000003c0)='/dev/vcsa#\x00', 0x200, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0xa) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000140)={{0x2, 0x3, 0xab0, 0x1, 0x7}}) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) pipe(&(0x7f0000000380)) 21:47:46 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340)='/dev/snd/timer\x00', 0x0) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x3) write$binfmt_script(r1, 0x0, 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x5, 0x70, 0x80, 0x0, 0x9, 0x80, 0x0, 0x9a, 0x82e, 0xa, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000100)}, 0x820, 0xfff7ffffffffff7f, 0x8, 0x0, 0xfffffffffffffff7, 0x3ff, 0x3ff}, 0x0, 0xd, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0xff, 0x8, 0x1, 0xfc, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0xf6, 0x0, @perf_config_ext={0x5, 0xfa4}, 0x40080, 0x8b, 0x8, 0x9, 0x0, 0x8, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f00000003c0)='/dev/vcsa#\x00', 0x200, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0xa) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000140)={{0x2, 0x3, 0xab0, 0x1, 0x7}}) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) pipe(&(0x7f0000000380)) 21:47:46 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340)='/dev/snd/timer\x00', 0x0) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x3) write$binfmt_script(r1, 0x0, 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x5, 0x70, 0x80, 0x0, 0x9, 0x80, 0x0, 0x9a, 0x82e, 0xa, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000100)}, 0x820, 0xfff7ffffffffff7f, 0x8, 0x0, 0xfffffffffffffff7, 0x3ff, 0x3ff}, 0x0, 0xd, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0xff, 0x8, 0x1, 0xfc, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0xf6, 0x0, @perf_config_ext={0x5, 0xfa4}, 0x40080, 0x8b, 0x8, 0x9, 0x0, 0x8, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f00000003c0)='/dev/vcsa#\x00', 0x200, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0xa) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000140)={{0x2, 0x3, 0xab0, 0x1, 0x7}}) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) pipe(&(0x7f0000000380)) 21:47:46 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340)='/dev/snd/timer\x00', 0x0) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x3) write$binfmt_script(r1, 0x0, 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x5, 0x70, 0x80, 0x0, 0x9, 0x80, 0x0, 0x9a, 0x82e, 0xa, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000100)}, 0x820, 0xfff7ffffffffff7f, 0x8, 0x0, 0xfffffffffffffff7, 0x3ff, 0x3ff}, 0x0, 0xd, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0xff, 0x8, 0x1, 0xfc, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0xf6, 0x0, @perf_config_ext={0x5, 0xfa4}, 0x40080, 0x8b, 0x8, 0x9, 0x0, 0x8, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f00000003c0)='/dev/vcsa#\x00', 0x200, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0xa) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000140)={{0x2, 0x3, 0xab0, 0x1, 0x7}}) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) pipe(&(0x7f0000000380)) 21:47:46 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340)='/dev/snd/timer\x00', 0x0) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x3) write$binfmt_script(r1, 0x0, 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x5, 0x70, 0x80, 0x0, 0x9, 0x80, 0x0, 0x9a, 0x82e, 0xa, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000100)}, 0x820, 0xfff7ffffffffff7f, 0x8, 0x0, 0xfffffffffffffff7, 0x3ff, 0x3ff}, 0x0, 0xd, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0xff, 0x8, 0x1, 0xfc, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0xf6, 0x0, @perf_config_ext={0x5, 0xfa4}, 0x40080, 0x8b, 0x8, 0x9, 0x0, 0x8, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f00000003c0)='/dev/vcsa#\x00', 0x200, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0xa) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000140)={{0x2, 0x3, 0xab0, 0x1, 0x7}}) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) pipe(&(0x7f0000000380)) 21:47:46 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340)='/dev/snd/timer\x00', 0x0) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x3) write$binfmt_script(r1, 0x0, 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x5, 0x70, 0x80, 0x0, 0x9, 0x80, 0x0, 0x9a, 0x82e, 0xa, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000100)}, 0x820, 0xfff7ffffffffff7f, 0x8, 0x0, 0xfffffffffffffff7, 0x3ff, 0x3ff}, 0x0, 0xd, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0xff, 0x8, 0x1, 0xfc, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0xf6, 0x0, @perf_config_ext={0x5, 0xfa4}, 0x40080, 0x8b, 0x8, 0x9, 0x0, 0x8, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f00000003c0)='/dev/vcsa#\x00', 0x200, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0xa) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000140)={{0x2, 0x3, 0xab0, 0x1, 0x7}}) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) pipe(&(0x7f0000000380)) 21:47:46 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340)='/dev/snd/timer\x00', 0x0) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x3) write$binfmt_script(r1, 0x0, 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x5, 0x70, 0x80, 0x0, 0x9, 0x80, 0x0, 0x9a, 0x82e, 0xa, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000100)}, 0x820, 0xfff7ffffffffff7f, 0x8, 0x0, 0xfffffffffffffff7, 0x3ff, 0x3ff}, 0x0, 0xd, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0xff, 0x8, 0x1, 0xfc, 0x0, 0x0, 0x100, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0xf6, 0x0, @perf_config_ext={0x5, 0xfa4}, 0x40080, 0x8b, 0x8, 0x9, 0x0, 0x8, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f00000003c0)='/dev/vcsa#\x00', 0x200, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0xa) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000140)={{0x2, 0x3, 0xab0, 0x1, 0x7}}) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x0) pipe(&(0x7f0000000380)) 21:47:46 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat$ttyS3(0xffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340)='/dev/snd/timer\x00', 0x0) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x3) write$binfmt_script(r1, 0x0, 0x191) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x5, 0x70,