last executing test programs: 1m54.776320715s ago: executing program 2 (id=17): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setstatus(r1, 0x4, 0x40) poll(&(0x7f0000000080)=[{r0, 0x4}], 0x1, 0x400) writev(r0, &(0x7f0000000440)=[{&(0x7f00000000c0)="1f5600c60c", 0x5}], 0x1) 1m53.221740903s ago: executing program 2 (id=22): syz_usb_connect(0x5, 0x24, &(0x7f0000001280)=ANY=[@ANYBLOB="12010003001f66088f0510660548020003010902120001049570810904008100ffffff02"], &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x23}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x640901, 0x0) unshare(0x28000600) io_uring_setup(0x105f2b, 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) writev(r0, &(0x7f00000000c0)=[{&(0x7f00000002c0)='\x00', 0x1}], 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x9c}, 0x1, 0x0, 0x0, 0x4041}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x2179, 0x77, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x9, 0x10, 0x9, [{{0x9, 0x4, 0x0, 0x54, 0x2, 0x3, 0x1, 0x1, 0x3, {0x9, 0x21, 0x8, 0x4, 0x1, {0x22, 0x6f1}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x10, 0xfb}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0x9, 0x5, 0x9}}]}}}]}}]}}, &(0x7f0000000600)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x201, 0x6, 0x5, 0x8, 0x8, 0x5}, 0x29, &(0x7f0000000140)={0x5, 0xf, 0x29, 0x1, [@ssp_cap={0x24, 0x10, 0xa, 0xa0, 0x6, 0x0, 0xf0f, 0x3, [0xc000, 0x0, 0xc0, 0x3f00, 0xff3fcf, 0xff0000]}]}, 0x4, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x1401}}, {0x5f, &(0x7f0000000580)=@string={0x5f, 0x3, "7fe5a6c9475601650f8fc9bb3f9947110884eb38a5db546d9a216adee1bbb70585d3d8fb22ff6e30e13cd27f4732df9c07e9b563f317e6dd6b844d0e0b7edc568f551e52895ece5d0ee254c5037757a7db29b8a95f2547cc2bb80e9c4f"}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x421}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x429}}]}) 1m52.732108241s ago: executing program 3 (id=23): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r0, 0x10, 0x70bd2d, 0x2ddfdbba, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x200488c1}, 0x850) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c0000", @ANYRES32=0x41424344], 0x0) r1 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d7", 0x6, 0xfffffffffffffffe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4800000010000504000000000000", @ANYBLOB="ebffffffff"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r2, r1}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x3, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1m51.749106346s ago: executing program 0 (id=25): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000010000003f0000004000000042000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000002000b953d3f842c7c48200"/28], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0f00030000b6cd31d4696a00"/26, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) readahead(0xffffffffffffffff, 0x7, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) read$msr(0xffffffffffffffff, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x10080, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000200), 0x80340, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000023893) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100), 0xa000, 0x0) semtimedop(0x0, &(0x7f0000000180)=[{0x0, 0xffe}], 0x1, 0x0) semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x800}], 0x1, 0x0) llistxattr(&(0x7f00000001c0)='./file2\x00', &(0x7f0000000400)=""/84, 0x54) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) ioctl$sock_SIOCOUTQ(r2, 0x5411, &(0x7f0000001c80)) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x400448e1, &(0x7f0000000240)={0x0, 0x0, "be5eec", 0x0, 0xff}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)="7123069bf516a810795ef87b649c0472f8f6d2148dcf195768fc1bd21634595a15634c6644a2a1b31a93af205a1e4d65b950ad49070000000000000000005f3f6c196be3025c91a9eeafe9854fd2135010a088136dd6cdd83ff246d33ebcc112f3979230321f42a7bcb55906d43b6508869b937fbc55c6b6840d07a3d739", &(0x7f0000000080), 0x101, r0}, 0x38) 1m51.590848218s ago: executing program 1 (id=26): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'erspan0\x00'}) timer_create(0x7d012b4cafbe7efb, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_setup(0x10d, 0x0, &(0x7f0000000340), 0x0) socket$packet(0x11, 0x3, 0x300) r1 = socket$inet_udp(0x2, 0x2, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000)={0x1}, 0x8) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x20081, 0x0) io_setup(0x6, &(0x7f0000001380)) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000003c0)="48884ca234cd083c2a1f5cec81c91b9547c12f4abadf96f767a95b76c144118ac35b7071638f3111825c1d0cd3b04dcdb4a437a9ec099c09c1691fc81300a10699e1a1a400000000000900"/84, 0xf000}, {0x0}], 0x60) socket(0x10, 0x3, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r4, &(0x7f0000000100)={'syz0\x00', {}, 0x7, [0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf6, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x180d, 0x0, 0xae4d, 0x0, 0x0, 0x3, 0xc0f0], [0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x400, 0x0, 0xed0, 0x4000000], [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0e, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0xf, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffe]}, 0x45c) ioctl$UI_DEV_SETUP(r4, 0x5501, 0x0) write$input_event(r4, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) syz_open_dev$sndctrl(0x0, 0x2, 0xa0c80) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_GET_XSAVE(r6, 0x9000aea4, &(0x7f00000023c0)) 1m50.118017481s ago: executing program 4 (id=27): r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", ' \x00'}, 0x28) sendmsg$inet(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000fc0)=[{&(0x7f0000000240)="6e37cff5b582e082d58cb23de3c19dc09c1d9b59ddb52ae25a3ca48e8d5284721b4b8e2d1fd011fc3144e4ceb18b32b5b8", 0x31}, {&(0x7f0000000e00)="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"/396, 0x18c}, {&(0x7f0000000940)="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", 0x105}, {&(0x7f0000000280)="0f1d547dfd011eee5ee96e9f1947184669b670def151f2ba53588a8d463cb08890097ea28302b894feb895090000fb0000000055c3a39a1e5ebde1638c8f408cbb197ede5a677de4582b685da9abb1184d1e4bf53bb5eafcc7d265002aeead4812d157cfb83a10f405c72c51bd99d99ea7f702c9424dcf", 0x77}, {&(0x7f0000000d00)="7ab285d32f60507430110d45fba18e434184c81c9a10404af273af02537863cd4f9b455ba771ca5222198ae07333ef0d2beff796d017427138340fc2b1528610600c9b212beee90a7941df2f1ec93c7469156c30892b39b7b43f9d229a356cc43023e2eb30577ca2725e6c1ce2e4557d4150336ac279203360ee37b0f67dce3d0fa468aed602dc9f641bbacbeac908a860f4d02f22946a5a73f0bd6896b5fb16e75d3437356e3e8307c6d07b767649101165270eb5c82bc6cd3d2c5954f370361578736b68b2d8d891071b5ad1372c18000000", 0xd3}, {&(0x7f0000001700)="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", 0xbe4}, {&(0x7f0000001100)="156f35eda3eaf4031cfd47c8fcb457593de1fc6e333cc2f86d11cefa6387fed76e611ca44de9ed7fa9f1b85663b4edc3b5421dcddec26cc9364883aa6f289716b42062e393bbfaa8aaa392aa39bb4b97eaf3531f7b0e1a160f7515b6d23227bd2ecee43659064b7b2162fd46a67a98e65897b5d2c342b95457ecec93a4a85ea49eb29def262cd0682e8a7165cc4ce23eca591173f89401e81fa9e3831659d9c0babdbdd0c74440ee38b7caae639ac452cf896a4299551eb2c3bb59b976d072a36b49ba184237c1decd0000000000002f306068ed8e2ec7c07f59c3a42901d556a277844c0d27778337dc540efc07fe000000000000", 0x69}, {&(0x7f00000006c0)="163c76999ae42cc5ecc01af351fb70e6e11409c5d3a344799b070cdd740699f7a1cc0bc12379c717a07625de3c464c8c0023f101be14eb4db316dd831fbd717de366fc76377e2ec18bc7a3a84d197de901a02e9787e530ae58eacd2459f729ce618cb52927ecb190ccb59052470c77f3a884e1208092d7ab2446a8d6e3ca5b642723a5519faaa38542c5ef7e98d45b4baa1620a70e0438cd083f3b860b05f5852749d96a5748f2d42ca3da2a34250d84a64bc6bc43a5b094b31ea4ec17a9b4973a4a0c589f1c1159773ec6bdcf99dacc886b07fa", 0xd4}, {&(0x7f0000000800)="4f7a08cb7e877b8163c9939a6fc02812ad2fe5f90078e5bb023fe54f0bfa7f933906000000392ba4ee60a9f8f24e5fd3a05eeafc0baa41c747752ec23fb297ee50f7a4b25a208ce6f518a2753e08dd6a598813e6d721ff302e", 0x59}, {&(0x7f0000000300)="cc098cb4f8101a257eb48ef649e4fd0dad820842c93863ab85977f0ab768a23d", 0x20}, {&(0x7f00000030c0)="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", 0xe4f}, {&(0x7f0000000380)="87288fd6f8a8a80d895fa7749bc2f0e5bcca9a49a501b4f9fb227ef4d8730085aab8f19ac4c0d7a958232b29202250f26311b768ca4fdb3c1d74b9571b1529fa8804e0e96e9d50d739ca5b682a1f1c4d5756655a8f2c427b7c110017df5cc0a1213f61ff525eb8659e82c646ec5abb51ff0712b62bee0ce64dad661b0083315bbb6dc70ad64740", 0x87}, {&(0x7f00000004c0)="00bd443813c38d87bf49516e31466e678bebb529c7075c25dc2ea89733fc665d172dc8b79d86dd420bd60d4661f3adb359c5a6e3ae0924cc94f672a71930373a35c3d97ddd3e832bfa7ed80dbb38d17e8eb605b3a5b7b591a340ce694a", 0x5d}, {&(0x7f0000000880)="6c5cc05a91bfd3bcd262b059d12608777876a7168de18104be83857cc1e201c5014bb0a769372f7276dd8660246a8c5b8c650c3dd4525c197fbc6b1db508394c43fe95e01aca6a84a4046660ead6f62cda8da60b56a683951b4db17ce7329a50f60d61445c64903606a659fd833a60bd5723d6178423122203cc1fd8b8c1b8323a", 0x81}, {&(0x7f0000000600)="68f2a042b0e917749bc9e0faaade59f49feb6406068473c401c792c3d0b1e58c9c2de57a8d874c64f3e73e6033f70a9bdbe8287faf", 0x35}, {&(0x7f0000000640)="796becfe3de2e555566bb7c4926ce32a2338bd1a01d8", 0x16}, {&(0x7f0000000a80)="aa875a0284fb632346b425e79cb7e050f23b5839ccb95fa9634c558c5dbb2bde5874a5ae89804c2e1145dc9b0baea36d4d63ede19c0f5498b61f776e838a24ef789efc72cbb25f78df4497c84598b615190b7090abc828edd154d992599c1119dfcf59c7afc627fa450a39097cfd0b895d28dd6770647273f14de4", 0x7b}, {&(0x7f0000000540)="9ac4d24a0a9911d2aab99a02ac5f9129d951ab84ec0a601b2cbf6bf6e7c7aafa92cce48c1f0cfe4f010a0d9a0832f3e6c7fc41edac6ba8ced3d1b4e4372712da8dba12ab92dc74aaef1df3ec0c24cb00aae603fc1b6ed1d44e001f3b4c1aebc60e872531c563fb259c3bc1eb28cce8c1e0814fc82e300dba432997d0acca775a517de1316264c9d673b0f08af2d3f2930b2950af9334fce247e6eae9af4baf34933fa252", 0x6a}, {&(0x7f0000001200)="c85d1626e9333f8dd93e543a91f57ced161c3fa5f677aa18c3e4ca9b8fc2ba8461ee338c307bb299112d72084a71f31b40e81fe83b0c5f02621014fa6679c04c12d195ceee6be033ee00f8b1929d79d0c7503476abca73401c89344351ff1437a4373b27aacdbaaad28012135225c4ceb021a867939e5d6e2847c039e5a0670353e259250c899d6cd7794f9c0acad79fbd815fccc398f00e30a2c23eefcb1e36", 0xffffff93}, {&(0x7f0000000c40)="d573ba403421fb59988e1c6c4a6aa3d1c1117a2207a8b7bbd3af426f8fdddc0fc031f832785163c9fb5702fd935e736c9668266e3e30ba1a595a6d69d7c684dc0a012835bcf2f45825964f9643d594c51420c799cbd756506a981769204dbb809b6f325a7c302372175c386cbcf9a9d79bea09be9f759b4afb55425af8160dfc4a28b654a352a79897ba5b02da59666470bd6562bae2d2779481b91e84f174cfdd35c4cc2675bc152186ed89", 0xac}], 0x14}, 0x40) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x1c, r0, 0x48212b8952c3affd, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 1m49.520687863s ago: executing program 3 (id=28): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x3) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2) ptrace(0x10, r1) r2 = fanotify_init(0x10, 0x8000) readv(r2, &(0x7f00000006c0)=[{&(0x7f0000000340)=""/248, 0xf8}], 0x1) ptrace(0x9, r1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0, 0x2a, 0x0, 0x100001, 0x3}, 0x28) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0), 0x8) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040ecc000d04"], 0x45) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000df2bfd404b0c0001cad7010203010902240001000000000904450002c9cee40009050802"], 0x0) 1m49.487225876s ago: executing program 4 (id=29): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r0, 0x10, 0x70bd2d, 0x2ddfdbba, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x200488c1}, 0x850) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c0000", @ANYRES32=0x41424344], 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d7", 0x6, 0xfffffffffffffffe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4800000010000504000000000000", @ANYBLOB="ebffffffff"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x3, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1m49.296247006s ago: executing program 1 (id=30): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ff81000000000000000000be7ba9bd"], 0x1c}}, 0x4000000) recvmmsg$unix(r0, &(0x7f00000032c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000100)=""/147, 0x93}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f0000000540)=""/245, 0xf5}, {&(0x7f00000008c0)=""/215, 0xd7}, {&(0x7f0000000740)=""/254, 0xfe}], 0x5}}], 0x3, 0x0, 0x0) 1m49.288082804s ago: executing program 0 (id=31): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10c4, 0xea90, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x8, {0x8, 0x0, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x40}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x10000}) ioctl(r2, 0x8b22, &(0x7f0000000040)) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x1, 0x3, "c282fe"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x1, 0xe, "ea6aafaabfc5926708627c6c0963"}, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r3, 0x707, &(0x7f0000000440)={&(0x7f0000000040)=[{0x1, 0x3d, 0x0, 0x0}], 0x1}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@newtaction={0x70, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_ctinfo={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x3f00}, @TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0x0, 0x0, 0x0, 0x7ff}}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0) 1m49.18464148s ago: executing program 1 (id=32): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYRESHEX=0x0], 0x0, 0x16, 0x0, 0x3, 0x78}, 0x28) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'team_slave_1\x00'}) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = fsopen(&(0x7f0000000300)='befs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000080)='iocharset', 0x0, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0x0, 0x25, 0x148, 0xb8, 0x60, 0x198, 0x2a8, 0x2a8, 0x198, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8, 0x0, {0x200003ae, 0x7f00}}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0\x00', {0xff}}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x8000, 'syz1\x00', {0x481c}}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x268) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x41}, 0x4040) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000003c0)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000380)="91d146bec86a05274aba73475471777473f8c6", 0x13, r2}, 0x68) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r6, 0x84, 0xa, &(0x7f0000000000)={0x8000, 0x8, 0x206, 0x4, 0x9, 0xc80000, 0xfffffcac, 0x2, r8}, &(0x7f0000000040)=0x20) 1m49.183793461s ago: executing program 4 (id=33): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000010000003f0000004000000042000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000002000b953d3f842c7c48200"/28], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0f00030000b6cd31d4696a00"/26, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) readahead(0xffffffffffffffff, 0x7, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) read$msr(0xffffffffffffffff, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') 1m49.148517791s ago: executing program 2 (id=34): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="b4050000000000007910830000000000070000000000000095000000000000000637f79d237f"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000002c0)="140000001d000b63d25a80648c2594", 0xf}, {&(0x7f0000000580)}], 0x2}, 0x4000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x80801) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4, 0x1000000}) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000339000/0x1000)=nil, 0x800000}) 1m47.83635615s ago: executing program 4 (id=35): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0xf, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf67c}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x19}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0xba}}}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1900"/24], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030030000b12d25a80648c2594f90224fc60100c034002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 1m46.33941279s ago: executing program 2 (id=36): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x9, @loopback, 0x10001}, 0x1c) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000b80)=@mangle={'mangle\x00', 0x8, 0x6, 0x698, 0x0, 0x290, 0x4a8, 0x290, 0x4a8, 0x5c8, 0x5c8, 0x5c8, 0x5c8, 0x5c8, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28}}, {{@ipv6={@dev, @private2, [], [], 'pimreg0\x00', 'nicvf0\x00'}, 0x0, 0x178, 0x1c0, 0x0, {0x5002}, [@common=@unspec=@physdev={{0x68}, {'ipvlan0\x00', {}, 'netpci0\x00', {}, 0x11, 0x15}}, @common=@unspec=@physdev={{0x68}, {'veth1_to_bridge\x00', {}, 'gretap0\x00', {}, 0x0, 0x10}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@loopback, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x33, 0x13, 0x6}}}, {{@ipv6={@local, @rand_addr=' \x01\x00', [], [0x0, 0x0, 0xffffffff], 'hsr0\x00', 'dvmrp1\x00', {}, {}, 0x6c}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@inet=@dccp={{0x30}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv4=@loopback}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@eui64={{0x28}}]}, @inet=@TOS={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6f8) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @loopback, 0x23}, 0x1c) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0)=0x5, 0x4) r3 = dup(r1) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f00000000c0)={0x7, 0xffffffffffffffa0, 0xfa00, {0xffffffffffffffff, 0x10c}}, 0xfffffd88) pipe2$9p(&(0x7f0000000080), 0x80000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000ffff25bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="17200000ef7b3e69400012800c0001006d6163766c616e003000028008000300", @ANYRES64], 0x68}, 0x1, 0x0, 0x0, 0x20004880}, 0x8000002) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xcdb281c6bf69a511}, 0x4000) ioctl$FS_IOC_RESVSP(r0, 0x40305828, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0xffffffffffffff5b, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000006c59850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800001600000000000000000000000d9500000000000000b643a16698e84d6ee4045539d475bdb7f95fed7a5eb9f13d32658c70d18a55613aced402dd60c2475ed5d9072e7f0177de7c5f8acbf809bd7b5a9d661b8476f8954efe5b804bd2969052808b1a1fe579a5a8c5e9bf7ed1a404b44fe3ab3144166be5c89fa3b4b291be12e61f114f4c926dbf6ef0071a096b134eb12cf17056dc057ffa21d4a59838b3dc7295f1db20661d0a8a26d9b2e22910d7a831bace67c5ebc0bddec9212a97aee284518f19e491bfadd972e03ee5be3a7e00db0ac2a0f215dad1b404c54ce5f0f9aa5d00000000"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$VIDIOC_CROPCAP(r6, 0xc02c563a, &(0x7f00000000c0)={0xa, {0x4, 0x3, 0x1, 0x401}, {0x0, 0x2, 0x4, 0x1000}, {0xa47, 0x5}}) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000000c0)={0xc}) 1m46.337429167s ago: executing program 3 (id=37): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) listen(r1, 0xffffffff) r2 = syz_io_uring_setup(0x82e, 0x0, &(0x7f0000000380)=0x0, &(0x7f0000000400)=0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000003c0)=@IORING_OP_SPLICE={0x1e, 0xb, 0x0, @fd=r1, 0x2, {0x0, r0}, 0xfff, 0x1, 0x1, {0x0, r5, r0}}) io_uring_enter(r2, 0x27e2, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r6 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r6, &(0x7f0000002700)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x12, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, 0x0) r7 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) r8 = socket$kcm(0x10, 0x2, 0x0) r9 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r9, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$kcm(r8, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e1406ca000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r10 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_QBUF(r10, 0xc058565d, &(0x7f0000000200)=@fd={0xfffffffd, 0x7, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2, "f6179206"}, 0x0, 0x2, {}, 0x20800}) write$binfmt_script(r7, 0x0, 0x0) r11 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r11, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r11, 0xc0045006, &(0x7f0000000040)=0xc) ioctl$SNDCTL_DSP_POST(r11, 0x5008, 0x0) ioctl$SNDCTL_DSP_SETFMT(r11, 0xc0045005, &(0x7f0000000640)=0x10) 1m46.263993948s ago: executing program 1 (id=38): syz_emit_ethernet(0x6a, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffff46ca9fbf7abae19cbb08004502005c00000000002f907800000000e0000001248081000000000010000800000086dd00090006080088be"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000300)=0xfff, 0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200052f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa"], 0xcfa4) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x1f4, 0x1, 0x0, &(0x7f0000000000)="ff", 0x0, 0x6f, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) r4 = socket$caif_stream(0x25, 0x1, 0x0) sendmmsg$inet(r4, 0x0, 0x0, 0x7c9ce320e12d300) r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r5}, @generic={0x66}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={r6, 0x58, &(0x7f0000000500)}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffedf}, 0x94) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_ID={0x8}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_COUNTERS={0x4}]}], {0x14, 0x10}}, 0x60}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x2, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x3, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x10, 0x4e26, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x200, 0x0, 0x2, {[@sack_perm={0x4, 0x2}]}}}}}}}, 0x0) 1m46.009077535s ago: executing program 0 (id=39): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x3, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1m45.360449852s ago: executing program 4 (id=40): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000780)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000381a7fe500000100000030000180060004000000000006000100020000000600020000000000040003"], 0x44}}, 0x0) r2 = socket(0x2d, 0x2, 0x0) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x81, 0xfffffffb}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000180)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x8000000, 0x0, 0xff, 0x1, 0xfffc}, 0x20) ioctl$SIOCRSGCAUSE(r2, 0x89e0, &(0x7f0000005d80)) syz_usb_connect(0x4, 0x4a, &(0x7f0000000280)={{0x12, 0x1, 0x110, 0xd4, 0xf8, 0x65, 0x40, 0x4d8, 0x83, 0xda47, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x38, 0x1, 0x2, 0x8, 0x40, 0xb3, [{{0x9, 0x4, 0x0, 0xb2, 0x1, 0x2, 0x2, 0x1, 0x94, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x10, 0xd5, 0xff, 0x3}, {0x6, 0x24, 0x1a, 0x3, 0x6422595bae3614d5}}], [{{0x9, 0x5, 0xa, 0x10, 0x26073d698670e078, 0x4, 0x6, 0xf}}]}}]}}]}}, 0x0) 1m45.20842216s ago: executing program 2 (id=41): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_XSAVE(r2, 0x9000aea4, &(0x7f00000023c0)) 1m45.045111583s ago: executing program 0 (id=42): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) 1m45.044207308s ago: executing program 3 (id=43): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000010000003f0000004000000042000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000002000b953d3f842c7c48200"/28], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0f00030000b6cd31d4696a00"/26, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) readahead(0xffffffffffffffff, 0x7, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) read$msr(0xffffffffffffffff, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x10080, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000200), 0x80340, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000023893) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100), 0xa000, 0x0) semtimedop(0x0, &(0x7f0000000180)=[{0x0, 0xffe}], 0x1, 0x0) semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x800}], 0x1, 0x0) llistxattr(&(0x7f00000001c0)='./file2\x00', &(0x7f0000000400)=""/84, 0x54) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000001c80)) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x400448e1, &(0x7f0000000240)={0x0, 0x0, "be5eec", 0x0, 0xff}) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)="7123069bf516a810795ef87b649c0472f8f6d2148dcf195768fc1bd21634595a15634c6644a2a1b31a93af205a1e4d65b950ad49070000000000000000005f3f6c196be3025c91a9eeafe9854fd2135010a088136dd6cdd83ff246d33ebcc112f3979230321f42a7bcb55906d43b6508869b937fbc55c6b6840d07a3d739", &(0x7f0000000080), 0x101, r0}, 0x38) 1m42.257515501s ago: executing program 0 (id=44): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ff81000000000000000000be7ba9bd"], 0x1c}}, 0x4000000) recvmmsg$unix(r0, &(0x7f00000032c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000100)=""/147, 0x93}, {&(0x7f00000009c0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000540)=""/245, 0xf5}, {&(0x7f00000008c0)=""/215, 0xd7}, {&(0x7f0000000740)=""/254, 0xfe}], 0x6}}], 0x3, 0x0, 0x0) 1m42.214816151s ago: executing program 1 (id=45): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) 1m42.150992315s ago: executing program 4 (id=46): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) r2 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x10100, 0x0, 0x80000213, 0x0, r0}, &(0x7f0000000380)=0x0, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000003c0)=@IORING_OP_SPLICE={0x1e, 0xb, 0x0, @fd=r1, 0x2, {0x0, r0}, 0xfff, 0x1, 0x1, {0x0, r4, r0}}) io_uring_enter(r2, 0x27e2, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r5 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r5, &(0x7f0000002700)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x12, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r6 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) io_setup(0x9, &(0x7f0000000b80)=0x0) r8 = socket$kcm(0x10, 0x2, 0x0) r9 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r9, &(0x7f0000514ff4)={0x10, 0x20, 0x0, 0x2ffffffff}, 0xc) sendmsg$kcm(r8, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e1406ca000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) io_submit(r7, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0, r6}]) write$binfmt_script(r6, 0x0, 0x0) r10 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r10, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r10, 0xc0045006, &(0x7f0000000040)=0xc) ioctl$SNDCTL_DSP_POST(r10, 0x5008, 0x0) 1m41.999717004s ago: executing program 3 (id=47): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r5 = syz_io_uring_setup(0xa0, &(0x7f00000002c0)={0x0, 0x105cc6, 0x1, 0x0, 0x207}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r4, 0xc000000, &(0x7f0000000000)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x12, 0x1}) io_uring_enter(r5, 0x847ba, 0x22, 0xe, 0x0, 0x0) 1m40.949165457s ago: executing program 0 (id=48): r0 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x502, 0x0) (async) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) capset(&(0x7f0000000340)={0x20071026}, &(0x7f00000000c0)={0x200000, 0x200020, 0x20000000}) (async) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$SIOCNRDECOBS(r3, 0x89e2) (async) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r2, @ANYBLOB="00000000100000001c000c80080002802d00ff0008000200", @ANYBLOB="3587"], 0x44}}, 0x0) (async) read$rfkill(r0, 0x0, 0x0) 1m38.392502919s ago: executing program 2 (id=49): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) listen(r1, 0xffffffff) r2 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x200, 0x3, 0xae, 0x0, r0}, &(0x7f0000000380)=0x0, &(0x7f0000000400)=0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000500), 0x80200) syz_io_uring_submit(r3, r4, &(0x7f00000003c0)=@IORING_OP_SPLICE={0x1e, 0x41, 0x0, @fd=r6, 0x0, {0x0, r0}, 0xffe, 0x1, 0x0, {0x0, r5, r6}}) io_uring_enter(r2, 0x27e2, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r7 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r7, &(0x7f0000002700)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x12, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r8 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) io_setup(0x9, &(0x7f0000000b80)=0x0) r10 = socket$kcm(0x10, 0x2, 0x0) r11 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r11, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$kcm(r10, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e1406ca000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) io_submit(r9, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x0, r8}]) write$binfmt_script(r8, 0x0, 0x0) r12 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0xc080, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r12, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_POST(r12, 0x5008, 0x0) ioctl$SNDCTL_DSP_SETFMT(r12, 0xc0045005, &(0x7f0000000640)=0x10) 1m38.3614159s ago: executing program 1 (id=50): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x28, r1, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008000}, 0x14) (fail_nth: 5) 1m37.476557459s ago: executing program 3 (id=51): write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000000)={0x30, 0x5, 0x0, {0x0, 0x1, 0x7, 0x6}}, 0x30) socketpair(0x21, 0xa, 0x6, &(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) pwritev2(r1, &(0x7f0000000280)=[{&(0x7f0000000080)="019ae6dbccb4edc5205d451c5d2b4f04e94507f796427f2da9ba2c9c48", 0x1d}, {&(0x7f00000000c0)="3eff7fde866d514960b81c9e64d548dbfb91c8fe9430cc1111d013547885e48605b84b07c06179afa04fda5b52459e0111c94e314eb3729c25180413975532e77899a3c86cd15fd12e4327c4d63e4175ef8c9c5d017915947ca3989fd8e6e3444f989e575d64bb6e196fcf143420eeb170ba7b901e618d817cc34430e6afba2d513f54b779b7a64328d76d048ee2338a0143ccdf66ba8492a80b3cf55f19aab1762f9f7bf8986545cde2ad20e7660bc673b477b3d50c3641070ea6e6b943661c12b7864f362483132b42df9a04914d8fe885c5574d15a6404b56989bbe5ff417b39a791d829d630e5b", 0xe9}, {&(0x7f00000001c0)="3d5f0958747bee517e427fbe6f16d3438b13afe2e416e30ce2495229a3d7eab359023040e52a741556098dce3c15b55213c1d401e00d47b729b30acd3b6692689774f97cf345fa8cc642d6d09ecb506a3a8df9c57f42b994d727513a2b6938b6177084e2539abea29f826837975e723f82b2bab7f29f342e658c384b4ee115485020f2363f0ec25ef78dfe4d8f59d9f163a54b14a919456ddac73609992352c989820ef0d5f673bb550ca2503878376f99e54f", 0xb3}], 0x3, 0xf, 0x7, 0x8) copy_file_range(r1, &(0x7f00000002c0)=0xff, r0, &(0x7f0000000300)=0x3, 0x3, 0x0) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000340), 0x200000) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000400)=@security={'security\x00', 0xe, 0x4, 0x330, 0xffffffff, 0xd0, 0xd0, 0x1a8, 0xffffffff, 0xffffffff, 0x298, 0x298, 0x298, 0xffffffff, 0x4, &(0x7f00000003c0), {[{{@ip={@dev={0xac, 0x14, 0x14, 0x2e}, @dev={0xac, 0x14, 0x14, 0x2c}, 0xff, 0xff, 'lo\x00', 'dummy0\x00', {0xff}, {}, 0x2f, 0x1, 0x24}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local, 0x6, 0xf, [0x3, 0x1c, 0x23, 0x1c, 0x24, 0x29, 0x29, 0x22, 0x3f, 0x2b, 0x31, 0x11, 0x6, 0x2, 0xe, 0x35], 0x1, 0x7, 0x5}}}, {{@uncond, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x40}, {{0x1, [0x5, 0x0, 0x5, 0x3, 0x4, 0x4], 0x5, 0x2}}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x52a0, 0xff, 0x1}}}, {{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@icmp={{0x28}, {0x0, "d28a", 0x1}}, @common=@ah={{0x30}, {[0x101, 0xa]}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x10, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x390) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000007c0)={0x0, 0x8, 0x6d8d, 0x1}) read$FUSE(r2, &(0x7f0000000bc0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_OPEN(r3, &(0x7f0000002c00)={0x20, 0xfffffffffffffffe, r5, {0x0, 0x2}}, 0x20) r6 = openat$cgroup_ro(r3, &(0x7f0000002c40)='pids.events\x00', 0x0, 0x0) pwritev2(r0, &(0x7f0000002c80), 0x0, 0x5, 0x9, 0x8) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000002dc0)={@map=r3, 0x36, 0x1, 0x8, &(0x7f0000002cc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000002d00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002d40)=[0x0, 0x0, 0x0], &(0x7f0000002d80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000030c0)=@bpf_ext={0x1c, 0x1f, &(0x7f0000002e40)=@raw=[@generic={0xb, 0x9, 0x3, 0x3ff, 0x7f6bf5}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x9}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x101}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x978}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}], &(0x7f0000002f40)='syzkaller\x00', 0x7f, 0xd, &(0x7f0000002f80)=""/13, 0x41100, 0x18, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f0000002fc0)={0x40, 0x1}, 0x8, 0x10, &(0x7f0000003000)={0x0, 0x2, 0x4}, 0x10, 0x26425, r6, 0x4, &(0x7f0000003040)=[r4, r4, r3, r4, r4], &(0x7f0000003080)=[{0x0, 0x1, 0x3, 0x1}, {0x2, 0x1, 0xc, 0x5}, {0x5, 0x1, 0x10, 0x2}, {0x1, 0x3, 0x7, 0x8}], 0x10, 0x8}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000002e00)={@map=r3, r2, 0x24, 0x10, 0x0, @void, @value=r8, @void, @void, r7}, 0x20) bind$rds(r4, &(0x7f0000003180)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) r9 = socket(0x5, 0xa, 0xffffffff) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x20010, r3, 0x69985000) clock_gettime(0x0, &(0x7f000000a000)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000009e80)=[{{&(0x7f00000031c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000003840)=[{&(0x7f0000003240)=""/107, 0x6b}, {&(0x7f00000032c0)=""/245, 0xf5}, {&(0x7f00000033c0)=""/237, 0xed}, {&(0x7f00000034c0)=""/171, 0xab}, {&(0x7f0000003580)=""/9, 0x9}, {&(0x7f00000035c0)=""/86, 0x56}, {&(0x7f0000003640)=""/187, 0xbb}, {&(0x7f0000003700)=""/124, 0x7c}, {&(0x7f0000003780)=""/147, 0x93}], 0x9, &(0x7f0000003900)=""/86, 0x56}, 0x4}, {{&(0x7f0000003980)=@hci, 0x80, &(0x7f0000003e40)=[{&(0x7f0000003a00)=""/90, 0x5a}, {&(0x7f0000003a80)=""/120, 0x78}, {&(0x7f0000003b00)=""/157, 0x9d}, {&(0x7f0000003bc0)=""/138, 0x8a}, {&(0x7f0000003c80)=""/122, 0x7a}, {&(0x7f0000003d00)=""/66, 0x42}, {&(0x7f0000003d80)=""/149, 0x95}], 0x7, &(0x7f0000003ec0)=""/54, 0x36}, 0x6ce84b0b}, {{&(0x7f0000003f00)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000006240)=[{&(0x7f0000003f80)=""/173, 0xad}, {&(0x7f0000004040)=""/147, 0x93}, {&(0x7f0000004100)=""/218, 0xda}, {&(0x7f0000004200)=""/4096, 0x1000}, {&(0x7f0000005200)=""/19, 0x13}, {&(0x7f0000005240)=""/4096, 0x1000}], 0x6, &(0x7f00000062c0)=""/209, 0xd1}, 0xe}, {{&(0x7f00000063c0)=@nl=@proc, 0x80, &(0x7f0000007580)=[{&(0x7f0000006440)=""/226, 0xe2}, {&(0x7f0000006540)=""/57, 0x39}, {&(0x7f0000006580)=""/4096, 0x1000}], 0x3, &(0x7f00000075c0)=""/105, 0x69}, 0x44b}, {{&(0x7f0000007640)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000008a40)=[{&(0x7f00000076c0)=""/243, 0xf3}, {&(0x7f00000077c0)=""/162, 0xa2}, {&(0x7f0000007880)=""/7, 0x7}, {&(0x7f00000078c0)=""/220, 0xdc}, {&(0x7f00000079c0)=""/96, 0x60}, {&(0x7f0000007a40)=""/4096, 0x1000}], 0x6, &(0x7f0000008ac0)=""/24, 0x18}, 0x7}, {{&(0x7f0000008b00)=@isdn, 0x80, &(0x7f0000009dc0)=[{&(0x7f0000008b80)=""/4096, 0x1000}, {&(0x7f0000009b80)=""/21, 0x15}, {&(0x7f0000009bc0)=""/69, 0x45}, {&(0x7f0000009c40)=""/82, 0x52}, {&(0x7f0000009cc0)=""/45, 0x2d}, {&(0x7f0000009d00)=""/64, 0x40}, {&(0x7f0000009d40)=""/121, 0x79}], 0x7, &(0x7f0000009e40)=""/26, 0x1a}, 0x4}], 0x6, 0xd931f81c5ce55938, &(0x7f000000a040)={r10, r11+60000000}) setsockopt$SO_J1939_FILTER(r12, 0x6b, 0x1, &(0x7f000000a080)=[{0x0, 0x1, {0x2}, {0x1, 0x0, 0x3}, 0xfe}, {0x0, 0x3, {0x0, 0xf1, 0x2}, {0x2, 0xff, 0x4}, 0x1, 0x65ef391df4629ea5}, {0x2, 0x2, {0x0, 0x1}, {0x2, 0x1, 0x3}, 0x2, 0xfe}, {0x0, 0x2, {0x1, 0xff, 0x1}, {0x1, 0xf0}, 0x2, 0x3}], 0x80) connect$tipc(r12, &(0x7f000000a100)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x0, 0x2}}, 0x10) syz_io_uring_setup(0x6a3e, &(0x7f000000a140)={0x0, 0xd4b4, 0x20, 0x2, 0x279}, &(0x7f000000a1c0), &(0x7f000000a200)) socket$netlink(0x10, 0x3, 0x8) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f000000a240)={'bond0\x00'}) getsockopt$inet_mptcp_buf(r12, 0x11c, 0x3, &(0x7f000000a280)=""/4096, &(0x7f000000b280)=0x1000) read$FUSE(r6, &(0x7f000000b2c0)={0x2020}, 0x2020) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f000000d300)={{0x1, 0x1, 0x18, r2, {r1}}, './file0\x00'}) openat(r13, &(0x7f000000d340)='./file0\x00', 0x1, 0x20) 1m21.378849576s ago: executing program 32 (id=48): r0 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x502, 0x0) (async) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) capset(&(0x7f0000000340)={0x20071026}, &(0x7f00000000c0)={0x200000, 0x200020, 0x20000000}) (async) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$SIOCNRDECOBS(r3, 0x89e2) (async) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r2, @ANYBLOB="00000000100000001c000c80080002802d00ff0008000200", @ANYBLOB="3587"], 0x44}}, 0x0) (async) read$rfkill(r0, 0x0, 0x0) 1m21.028661151s ago: executing program 33 (id=50): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x28, r1, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008000}, 0x14) (fail_nth: 5) 1m20.750769035s ago: executing program 34 (id=49): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) listen(r1, 0xffffffff) r2 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x200, 0x3, 0xae, 0x0, r0}, &(0x7f0000000380)=0x0, &(0x7f0000000400)=0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000500), 0x80200) syz_io_uring_submit(r3, r4, &(0x7f00000003c0)=@IORING_OP_SPLICE={0x1e, 0x41, 0x0, @fd=r6, 0x0, {0x0, r0}, 0xffe, 0x1, 0x0, {0x0, r5, r6}}) io_uring_enter(r2, 0x27e2, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r7 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r7, &(0x7f0000002700)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x12, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r8 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) io_setup(0x9, &(0x7f0000000b80)=0x0) r10 = socket$kcm(0x10, 0x2, 0x0) r11 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r11, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$kcm(r10, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e1406ca000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) io_submit(r9, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x0, r8}]) write$binfmt_script(r8, 0x0, 0x0) r12 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0xc080, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r12, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_POST(r12, 0x5008, 0x0) ioctl$SNDCTL_DSP_SETFMT(r12, 0xc0045005, &(0x7f0000000640)=0x10) 1m20.328930649s ago: executing program 35 (id=46): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) r2 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x10100, 0x0, 0x80000213, 0x0, r0}, &(0x7f0000000380)=0x0, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000003c0)=@IORING_OP_SPLICE={0x1e, 0xb, 0x0, @fd=r1, 0x2, {0x0, r0}, 0xfff, 0x1, 0x1, {0x0, r4, r0}}) io_uring_enter(r2, 0x27e2, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r5 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r5, &(0x7f0000002700)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x12, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r6 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) io_setup(0x9, &(0x7f0000000b80)=0x0) r8 = socket$kcm(0x10, 0x2, 0x0) r9 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r9, &(0x7f0000514ff4)={0x10, 0x20, 0x0, 0x2ffffffff}, 0xc) sendmsg$kcm(r8, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e1406ca000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) io_submit(r7, 0x1, &(0x7f00000002c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0, r6}]) write$binfmt_script(r6, 0x0, 0x0) r10 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r10, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r10, 0xc0045006, &(0x7f0000000040)=0xc) ioctl$SNDCTL_DSP_POST(r10, 0x5008, 0x0) 1m19.991178551s ago: executing program 36 (id=51): write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000000)={0x30, 0x5, 0x0, {0x0, 0x1, 0x7, 0x6}}, 0x30) socketpair(0x21, 0xa, 0x6, &(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) pwritev2(r1, &(0x7f0000000280)=[{&(0x7f0000000080)="019ae6dbccb4edc5205d451c5d2b4f04e94507f796427f2da9ba2c9c48", 0x1d}, {&(0x7f00000000c0)="3eff7fde866d514960b81c9e64d548dbfb91c8fe9430cc1111d013547885e48605b84b07c06179afa04fda5b52459e0111c94e314eb3729c25180413975532e77899a3c86cd15fd12e4327c4d63e4175ef8c9c5d017915947ca3989fd8e6e3444f989e575d64bb6e196fcf143420eeb170ba7b901e618d817cc34430e6afba2d513f54b779b7a64328d76d048ee2338a0143ccdf66ba8492a80b3cf55f19aab1762f9f7bf8986545cde2ad20e7660bc673b477b3d50c3641070ea6e6b943661c12b7864f362483132b42df9a04914d8fe885c5574d15a6404b56989bbe5ff417b39a791d829d630e5b", 0xe9}, {&(0x7f00000001c0)="3d5f0958747bee517e427fbe6f16d3438b13afe2e416e30ce2495229a3d7eab359023040e52a741556098dce3c15b55213c1d401e00d47b729b30acd3b6692689774f97cf345fa8cc642d6d09ecb506a3a8df9c57f42b994d727513a2b6938b6177084e2539abea29f826837975e723f82b2bab7f29f342e658c384b4ee115485020f2363f0ec25ef78dfe4d8f59d9f163a54b14a919456ddac73609992352c989820ef0d5f673bb550ca2503878376f99e54f", 0xb3}], 0x3, 0xf, 0x7, 0x8) copy_file_range(r1, &(0x7f00000002c0)=0xff, r0, &(0x7f0000000300)=0x3, 0x3, 0x0) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000340), 0x200000) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000400)=@security={'security\x00', 0xe, 0x4, 0x330, 0xffffffff, 0xd0, 0xd0, 0x1a8, 0xffffffff, 0xffffffff, 0x298, 0x298, 0x298, 0xffffffff, 0x4, &(0x7f00000003c0), {[{{@ip={@dev={0xac, 0x14, 0x14, 0x2e}, @dev={0xac, 0x14, 0x14, 0x2c}, 0xff, 0xff, 'lo\x00', 'dummy0\x00', {0xff}, {}, 0x2f, 0x1, 0x24}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local, 0x6, 0xf, [0x3, 0x1c, 0x23, 0x1c, 0x24, 0x29, 0x29, 0x22, 0x3f, 0x2b, 0x31, 0x11, 0x6, 0x2, 0xe, 0x35], 0x1, 0x7, 0x5}}}, {{@uncond, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x40}, {{0x1, [0x5, 0x0, 0x5, 0x3, 0x4, 0x4], 0x5, 0x2}}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x52a0, 0xff, 0x1}}}, {{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@icmp={{0x28}, {0x0, "d28a", 0x1}}, @common=@ah={{0x30}, {[0x101, 0xa]}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x10, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x390) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000007c0)={0x0, 0x8, 0x6d8d, 0x1}) read$FUSE(r2, &(0x7f0000000bc0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_OPEN(r3, &(0x7f0000002c00)={0x20, 0xfffffffffffffffe, r5, {0x0, 0x2}}, 0x20) r6 = openat$cgroup_ro(r3, &(0x7f0000002c40)='pids.events\x00', 0x0, 0x0) pwritev2(r0, &(0x7f0000002c80), 0x0, 0x5, 0x9, 0x8) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000002dc0)={@map=r3, 0x36, 0x1, 0x8, &(0x7f0000002cc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000002d00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002d40)=[0x0, 0x0, 0x0], &(0x7f0000002d80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000030c0)=@bpf_ext={0x1c, 0x1f, &(0x7f0000002e40)=@raw=[@generic={0xb, 0x9, 0x3, 0x3ff, 0x7f6bf5}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x9}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x101}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x978}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}], &(0x7f0000002f40)='syzkaller\x00', 0x7f, 0xd, &(0x7f0000002f80)=""/13, 0x41100, 0x18, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f0000002fc0)={0x40, 0x1}, 0x8, 0x10, &(0x7f0000003000)={0x0, 0x2, 0x4}, 0x10, 0x26425, r6, 0x4, &(0x7f0000003040)=[r4, r4, r3, r4, r4], &(0x7f0000003080)=[{0x0, 0x1, 0x3, 0x1}, {0x2, 0x1, 0xc, 0x5}, {0x5, 0x1, 0x10, 0x2}, {0x1, 0x3, 0x7, 0x8}], 0x10, 0x8}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000002e00)={@map=r3, r2, 0x24, 0x10, 0x0, @void, @value=r8, @void, @void, r7}, 0x20) bind$rds(r4, &(0x7f0000003180)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) r9 = socket(0x5, 0xa, 0xffffffff) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x20010, r3, 0x69985000) clock_gettime(0x0, &(0x7f000000a000)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000009e80)=[{{&(0x7f00000031c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000003840)=[{&(0x7f0000003240)=""/107, 0x6b}, {&(0x7f00000032c0)=""/245, 0xf5}, {&(0x7f00000033c0)=""/237, 0xed}, {&(0x7f00000034c0)=""/171, 0xab}, {&(0x7f0000003580)=""/9, 0x9}, {&(0x7f00000035c0)=""/86, 0x56}, {&(0x7f0000003640)=""/187, 0xbb}, {&(0x7f0000003700)=""/124, 0x7c}, {&(0x7f0000003780)=""/147, 0x93}], 0x9, &(0x7f0000003900)=""/86, 0x56}, 0x4}, {{&(0x7f0000003980)=@hci, 0x80, &(0x7f0000003e40)=[{&(0x7f0000003a00)=""/90, 0x5a}, {&(0x7f0000003a80)=""/120, 0x78}, {&(0x7f0000003b00)=""/157, 0x9d}, {&(0x7f0000003bc0)=""/138, 0x8a}, {&(0x7f0000003c80)=""/122, 0x7a}, {&(0x7f0000003d00)=""/66, 0x42}, {&(0x7f0000003d80)=""/149, 0x95}], 0x7, &(0x7f0000003ec0)=""/54, 0x36}, 0x6ce84b0b}, {{&(0x7f0000003f00)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000006240)=[{&(0x7f0000003f80)=""/173, 0xad}, {&(0x7f0000004040)=""/147, 0x93}, {&(0x7f0000004100)=""/218, 0xda}, {&(0x7f0000004200)=""/4096, 0x1000}, {&(0x7f0000005200)=""/19, 0x13}, {&(0x7f0000005240)=""/4096, 0x1000}], 0x6, &(0x7f00000062c0)=""/209, 0xd1}, 0xe}, {{&(0x7f00000063c0)=@nl=@proc, 0x80, &(0x7f0000007580)=[{&(0x7f0000006440)=""/226, 0xe2}, {&(0x7f0000006540)=""/57, 0x39}, {&(0x7f0000006580)=""/4096, 0x1000}], 0x3, &(0x7f00000075c0)=""/105, 0x69}, 0x44b}, {{&(0x7f0000007640)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000008a40)=[{&(0x7f00000076c0)=""/243, 0xf3}, {&(0x7f00000077c0)=""/162, 0xa2}, {&(0x7f0000007880)=""/7, 0x7}, {&(0x7f00000078c0)=""/220, 0xdc}, {&(0x7f00000079c0)=""/96, 0x60}, {&(0x7f0000007a40)=""/4096, 0x1000}], 0x6, &(0x7f0000008ac0)=""/24, 0x18}, 0x7}, {{&(0x7f0000008b00)=@isdn, 0x80, &(0x7f0000009dc0)=[{&(0x7f0000008b80)=""/4096, 0x1000}, {&(0x7f0000009b80)=""/21, 0x15}, {&(0x7f0000009bc0)=""/69, 0x45}, {&(0x7f0000009c40)=""/82, 0x52}, {&(0x7f0000009cc0)=""/45, 0x2d}, {&(0x7f0000009d00)=""/64, 0x40}, {&(0x7f0000009d40)=""/121, 0x79}], 0x7, &(0x7f0000009e40)=""/26, 0x1a}, 0x4}], 0x6, 0xd931f81c5ce55938, &(0x7f000000a040)={r10, r11+60000000}) setsockopt$SO_J1939_FILTER(r12, 0x6b, 0x1, &(0x7f000000a080)=[{0x0, 0x1, {0x2}, {0x1, 0x0, 0x3}, 0xfe}, {0x0, 0x3, {0x0, 0xf1, 0x2}, {0x2, 0xff, 0x4}, 0x1, 0x65ef391df4629ea5}, {0x2, 0x2, {0x0, 0x1}, {0x2, 0x1, 0x3}, 0x2, 0xfe}, {0x0, 0x2, {0x1, 0xff, 0x1}, {0x1, 0xf0}, 0x2, 0x3}], 0x80) connect$tipc(r12, &(0x7f000000a100)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x0, 0x2}}, 0x10) syz_io_uring_setup(0x6a3e, &(0x7f000000a140)={0x0, 0xd4b4, 0x20, 0x2, 0x279}, &(0x7f000000a1c0), &(0x7f000000a200)) socket$netlink(0x10, 0x3, 0x8) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f000000a240)={'bond0\x00'}) getsockopt$inet_mptcp_buf(r12, 0x11c, 0x3, &(0x7f000000a280)=""/4096, &(0x7f000000b280)=0x1000) read$FUSE(r6, &(0x7f000000b2c0)={0x2020}, 0x2020) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f000000d300)={{0x1, 0x1, 0x18, r2, {r1}}, './file0\x00'}) openat(r13, &(0x7f000000d340)='./file0\x00', 0x1, 0x20) 52.157576658s ago: executing program 5 (id=52): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x3, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 50.678400208s ago: executing program 6 (id=53): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="b4050000000000007910830000000000070000000000000095000000000000000637f79d237f"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000002c0)="140000001d000b63d25a80648c2594", 0xf}, {&(0x7f0000000580)}], 0x2}, 0x4000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x80801) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x80}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000339000/0x1000)=nil, 0x800000}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000001c0)='xen_cpu_load_idt\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x82420000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x0, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000080)='H', 0x1}], 0x1}, 0x0) 43.476523026s ago: executing program 6 (id=57): socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610428000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) r0 = socket(0x848000000015, 0x805, 0x0) ioctl$SIOCAX25GETUID(r0, 0x89e0, &(0x7f0000000480)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) r1 = socket(0x1, 0x80802, 0x0) getpeername$ax25(r1, &(0x7f0000000080)={{0x3, @bcast}, [@rose, @null, @bcast, @netrom, @null, @null, @rose, @rose]}, &(0x7f0000000100)=0x48) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x8f) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x24, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r3, {0xfff2}, {}, {0xa, 0x1}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4004140}, 0x0) 41.268822138s ago: executing program 7 (id=54): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0x1d}, 0x18) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r1, 0x4020565b, &(0x7f0000000140)={0x6, 0x1, 0x7}) 41.154560065s ago: executing program 6 (id=58): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="14000000130001ffffff7f8cd913e90002"], 0x14}], 0x1}, 0x0) 40.781076467s ago: executing program 7 (id=59): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r0, 0x4068aea3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8f}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x8000000000002) sched_setscheduler(r1, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e00"/11, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000001c40)=ANY=[@ANYBLOB="9feb010018000000010000000c0000000c000000060000000400000000000007000000000000000061"], 0x0, 0x2a}, 0x28) 36.127350962s ago: executing program 37 (id=52): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x3, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 36.043757198s ago: executing program 7 (id=61): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x10000, 0x3, 0x1, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffff7}, {0x0, 0x8, 0xfffffffffffffffc, 0x8}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in6=@empty, 0x2, 0x6c}, 0xa, @in=@empty, 0x0, 0x5, 0x0, 0xb7}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 35.940463604s ago: executing program 9 (id=56): syz_emit_ethernet(0x3a, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x3, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x10, 0x4e26, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x200, 0x0, 0x2, {[@sack_perm={0x4, 0x2}]}}}}}}}, 0x0) 35.177509943s ago: executing program 8 (id=55): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) 35.103855041s ago: executing program 9 (id=62): syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c0000", @ANYRES32=0x41424344], 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d7", 0x6, 0xfffffffffffffffe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4800000010000504000000000000", @ANYBLOB="ebffffffff"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x3, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 34.937349734s ago: executing program 6 (id=63): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000010000003f0000004000000042000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000002000b953d3f842c7c48200"/28], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0f00030000b6cd31d4696a00"/26, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) readahead(0xffffffffffffffff, 0x7, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) read$msr(0xffffffffffffffff, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') 32.369766976s ago: executing program 8 (id=64): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100009e173610ef171e7206de0102030109021200010000000009040000000206"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 27.072810884s ago: executing program 6 (id=65): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) setsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f0000000040)=0x3, 0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r3, 0x29, 0x16, &(0x7f0000000000), 0x4) setsockopt$inet6_int(r3, 0x29, 0x16, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x1200, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x14615, 0xef}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x200488c0}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x0}, 0x94) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000180)='$@+Z\\-){$)![\\\'\x00', 0x0, r1) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) r7 = accept4(r6, 0x0, 0x0, 0x800) recvmsg(r7, 0x0, 0x20) 0s ago: executing program 38 (id=65): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) setsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f0000000040)=0x3, 0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r3, 0x29, 0x16, &(0x7f0000000000), 0x4) setsockopt$inet6_int(r3, 0x29, 0x16, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x1200, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x14615, 0xef}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x200488c0}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x0}, 0x94) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000180)='$@+Z\\-){$)![\\\'\x00', 0x0, r1) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) r7 = accept4(r6, 0x0, 0x0, 0x800) recvmsg(r7, 0x0, 0x20) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.32' (ED25519) to the list of known hosts. [ 82.314596][ T5828] cgroup: Unknown subsys name 'net' [ 82.496221][ T5828] cgroup: Unknown subsys name 'cpuset' [ 82.505777][ T5828] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.142049][ T5828] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 88.268957][ T5841] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 88.304077][ T5848] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 88.311629][ T5848] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 88.330510][ T5855] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 88.350769][ T5851] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 88.352039][ T5855] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 88.359676][ T5851] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 88.372859][ T5851] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 88.373000][ T5855] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 88.381282][ T5851] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 88.395214][ T5851] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.403149][ T5855] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 88.404511][ T5851] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 88.418159][ T5855] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 88.425566][ T5851] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 88.432975][ T5855] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 88.443722][ T5854] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 88.448780][ T5851] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 88.451197][ T5855] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 88.466106][ T5851] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 88.466688][ T5855] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 88.481754][ T5855] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 88.490333][ T5855] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 88.498160][ T5855] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.522057][ T5855] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 89.047534][ T5846] chnl_net:caif_netlink_parms(): no params data found [ 89.250000][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 89.287539][ T5849] chnl_net:caif_netlink_parms(): no params data found [ 89.439310][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.446672][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.455012][ T5846] bridge_slave_0: entered allmulticast mode [ 89.462773][ T5846] bridge_slave_0: entered promiscuous mode [ 89.498750][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.508534][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.516261][ T5846] bridge_slave_1: entered allmulticast mode [ 89.526919][ T5846] bridge_slave_1: entered promiscuous mode [ 89.535295][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 89.621788][ T5850] chnl_net:caif_netlink_parms(): no params data found [ 89.684437][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.697691][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.736065][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.744180][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.751345][ T5849] bridge_slave_0: entered allmulticast mode [ 89.759806][ T5849] bridge_slave_0: entered promiscuous mode [ 89.827035][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.834361][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.841598][ T5849] bridge_slave_1: entered allmulticast mode [ 89.850126][ T5849] bridge_slave_1: entered promiscuous mode [ 89.860076][ T5846] team0: Port device team_slave_0 added [ 89.893959][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.901155][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.908607][ T5842] bridge_slave_0: entered allmulticast mode [ 89.916260][ T5842] bridge_slave_0: entered promiscuous mode [ 89.941580][ T5846] team0: Port device team_slave_1 added [ 89.977193][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.984965][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.993391][ T5842] bridge_slave_1: entered allmulticast mode [ 90.000686][ T5842] bridge_slave_1: entered promiscuous mode [ 90.080926][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.119282][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.126508][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.136484][ T5838] bridge_slave_0: entered allmulticast mode [ 90.144265][ T5838] bridge_slave_0: entered promiscuous mode [ 90.168233][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.179180][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.186315][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.216727][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.228760][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.240871][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.248307][ T5850] bridge_slave_0: entered allmulticast mode [ 90.256599][ T5850] bridge_slave_0: entered promiscuous mode [ 90.265452][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.273107][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.280321][ T5850] bridge_slave_1: entered allmulticast mode [ 90.288036][ T5850] bridge_slave_1: entered promiscuous mode [ 90.294753][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.302018][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.309402][ T5838] bridge_slave_1: entered allmulticast mode [ 90.316910][ T5838] bridge_slave_1: entered promiscuous mode [ 90.339947][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.376976][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.387173][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.413785][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.455048][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.467797][ T5849] team0: Port device team_slave_0 added [ 90.474432][ T5855] Bluetooth: hci2: command tx timeout [ 90.482104][ T5160] Bluetooth: hci1: command tx timeout [ 90.492880][ T5849] team0: Port device team_slave_1 added [ 90.514035][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.542660][ T5160] Bluetooth: hci3: command tx timeout [ 90.548243][ T5845] Bluetooth: hci4: command tx timeout [ 90.554139][ T5855] Bluetooth: hci0: command tx timeout [ 90.566163][ T5842] team0: Port device team_slave_0 added [ 90.589117][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.603120][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.614213][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.639508][ T5842] team0: Port device team_slave_1 added [ 90.672020][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.679028][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.705344][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.773380][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.780367][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.806898][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.851795][ T5846] hsr_slave_0: entered promiscuous mode [ 90.858476][ T5846] hsr_slave_1: entered promiscuous mode [ 90.867103][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.874581][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.900711][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.920928][ T5850] team0: Port device team_slave_0 added [ 90.929861][ T5838] team0: Port device team_slave_0 added [ 90.939221][ T5838] team0: Port device team_slave_1 added [ 90.946142][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.953319][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.979625][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.003678][ T5850] team0: Port device team_slave_1 added [ 91.126851][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.134170][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.160588][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.173586][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.180571][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.207131][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.230888][ T5849] hsr_slave_0: entered promiscuous mode [ 91.237635][ T5849] hsr_slave_1: entered promiscuous mode [ 91.244382][ T5849] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.252379][ T5849] Cannot create hsr debugfs directory [ 91.258701][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.266392][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.292464][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.305446][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.312538][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.338600][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.397912][ T5842] hsr_slave_0: entered promiscuous mode [ 91.405240][ T5842] hsr_slave_1: entered promiscuous mode [ 91.411506][ T5842] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.419224][ T5842] Cannot create hsr debugfs directory [ 91.509687][ T5838] hsr_slave_0: entered promiscuous mode [ 91.516879][ T5838] hsr_slave_1: entered promiscuous mode [ 91.527659][ T5838] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.536029][ T5838] Cannot create hsr debugfs directory [ 91.584060][ T5850] hsr_slave_0: entered promiscuous mode [ 91.590802][ T5850] hsr_slave_1: entered promiscuous mode [ 91.597311][ T5850] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.608695][ T5850] Cannot create hsr debugfs directory [ 91.905113][ T43] cfg80211: failed to load regulatory.db [ 92.209175][ T5846] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 92.225660][ T5846] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 92.237493][ T5846] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 92.258797][ T5846] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 92.320924][ T5849] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 92.334593][ T5849] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 92.346751][ T5849] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 92.364531][ T5849] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 92.476354][ T5842] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 92.498647][ T5842] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 92.516435][ T5842] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 92.546983][ T5160] Bluetooth: hci1: command tx timeout [ 92.550084][ T5842] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 92.552752][ T5160] Bluetooth: hci2: command tx timeout [ 92.622430][ T5160] Bluetooth: hci3: command tx timeout [ 92.622852][ T5855] Bluetooth: hci0: command tx timeout [ 92.627907][ T5160] Bluetooth: hci4: command tx timeout [ 92.667911][ T5850] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 92.696990][ T5850] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 92.724151][ T5850] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 92.735534][ T5850] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 92.763543][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.834829][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.851231][ T5838] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 92.863475][ T5838] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 92.896186][ T5838] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 92.908534][ T3572] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.915925][ T3572] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.943337][ T5838] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 92.968507][ T1149] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.975686][ T1149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.061220][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.140662][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.165060][ T5849] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.197766][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.205012][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.222634][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.229831][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.268492][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.305980][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.313226][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.331117][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.357202][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.364434][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.424272][ T5850] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.468903][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.476133][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.554786][ T1149] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.562133][ T1149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.599360][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.714544][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.742921][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.801620][ T3572] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.808930][ T3572] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.865792][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.873005][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.020222][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.145511][ T5846] veth0_vlan: entered promiscuous mode [ 94.201286][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.217041][ T5846] veth1_vlan: entered promiscuous mode [ 94.346696][ T5849] veth0_vlan: entered promiscuous mode [ 94.436476][ T5849] veth1_vlan: entered promiscuous mode [ 94.459634][ T5846] veth0_macvtap: entered promiscuous mode [ 94.474527][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.507273][ T5846] veth1_macvtap: entered promiscuous mode [ 94.537741][ T5849] veth0_macvtap: entered promiscuous mode [ 94.554931][ T5849] veth1_macvtap: entered promiscuous mode [ 94.597006][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.629067][ T5845] Bluetooth: hci1: command tx timeout [ 94.635384][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.637630][ T5160] Bluetooth: hci2: command tx timeout [ 94.648300][ T5849] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.658126][ T5849] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.669669][ T5849] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.684965][ T5849] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.700557][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.708456][ T5160] Bluetooth: hci4: command tx timeout [ 94.714434][ T5845] Bluetooth: hci0: command tx timeout [ 94.715356][ T5855] Bluetooth: hci3: command tx timeout [ 94.766737][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.847940][ T5846] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.862226][ T5846] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.871002][ T5846] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.882405][ T5846] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.976113][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.001558][ T5850] veth0_vlan: entered promiscuous mode [ 95.011498][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.026329][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.076925][ T5850] veth1_vlan: entered promiscuous mode [ 95.124392][ T3518] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.134000][ T3518] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.138485][ T5842] veth0_vlan: entered promiscuous mode [ 95.196674][ T5842] veth1_vlan: entered promiscuous mode [ 95.267475][ T3518] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.270692][ T5849] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 95.290438][ T3518] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.330184][ T5850] veth0_macvtap: entered promiscuous mode [ 95.418986][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.424135][ T5850] veth1_macvtap: entered promiscuous mode [ 95.438485][ T5838] veth0_vlan: entered promiscuous mode [ 95.444675][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.646809][ T5961] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2'. [ 96.032143][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 96.074178][ T5838] veth1_vlan: entered promiscuous mode [ 96.117921][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.143792][ T5842] veth0_macvtap: entered promiscuous mode [ 96.184646][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.206930][ T5842] veth1_macvtap: entered promiscuous mode [ 96.245329][ T5850] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.265815][ T5850] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.275207][ T5850] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.284232][ T5850] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.409488][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.430723][ T5838] veth0_macvtap: entered promiscuous mode [ 96.475526][ T5838] veth1_macvtap: entered promiscuous mode [ 96.519632][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.607251][ T5842] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.649959][ T5842] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.759741][ T5970] ======================================================= [ 96.759741][ T5970] WARNING: The mand mount option has been deprecated and [ 96.759741][ T5970] and is ignored by this kernel. Remove the mand [ 96.759741][ T5970] option from the mount to silence this warning. [ 96.759741][ T5970] ======================================================= [ 96.808616][ T5855] Bluetooth: hci2: command tx timeout [ 96.814359][ T5855] Bluetooth: hci1: command tx timeout [ 96.820189][ T5160] Bluetooth: hci4: command tx timeout [ 96.826104][ T5855] Bluetooth: hci0: command tx timeout [ 96.832077][ T5160] Bluetooth: hci3: command tx timeout [ 96.997589][ T5842] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.127979][ T5842] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.349452][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.443547][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.487742][ T5838] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.498994][ T5838] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.511338][ T5838] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.522961][ T5838] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.539768][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.558321][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.772106][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 97.812795][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 97.827293][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 97.842127][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.863666][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.032115][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 98.124064][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.134216][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.285654][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.303479][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.412600][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 98.719252][ T5985] process 'syz.3.4' launched './file2' with NULL argv: empty string added [ 98.782635][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 98.791089][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 98.800525][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 98.899326][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 99.748253][ T5976] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 99.778405][ T5851] Bluetooth: hci0: command 0x0c1a tx timeout [ 99.787363][ T5976] Bluetooth: hci0: Opcode 0x0406 failed: -110 [ 100.636276][ T5996] Zero length message leads to an empty skb [ 100.648948][ T5976] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 100.898672][ T5987] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 100.908869][ T5976] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 100.922678][ T30] audit: type=1326 audit(1752944035.977:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5995 comm="syz.1.8" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f81d098e9a9 code=0x0 [ 100.951520][ T5976] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 100.966666][ T5976] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 100.979644][ T5976] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 100.988507][ T5976] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 100.999374][ T5976] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 101.008554][ T5976] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 101.016812][ T5976] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 101.027494][ T5976] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 101.038500][ T5976] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 101.045128][ T5976] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 101.056396][ T5976] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 101.303839][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.318121][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.343938][ T43] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 101.570709][ T6007] netlink: 132 bytes leftover after parsing attributes in process `syz.3.10'. [ 101.773074][ T43] usb 2-1: Using ep0 maxpacket: 8 [ 101.874853][ T5160] Bluetooth: hci0: command 0x0c1a tx timeout [ 101.875863][ T43] usb 2-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config [ 102.032589][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 49, changing to 9 [ 102.063994][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 8392, setting to 1024 [ 102.084472][ T43] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 102.108655][ T43] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 102.132012][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.181330][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.202325][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.249656][ T43] usb 2-1: config 0 descriptor?? [ 102.641165][ T5997] tmpfs: Unknown parameter 'nr_i~odes' [ 102.932210][ T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 102.942222][ T5160] Bluetooth: hci1: command 0x0c1a tx timeout [ 103.022096][ T5160] Bluetooth: hci3: command 0x0c1a tx timeout [ 103.028297][ T5851] Bluetooth: hci2: command 0x0c1a tx timeout [ 103.082336][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 103.090777][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 103.102310][ T5160] Bluetooth: hci4: command 0x0c1a tx timeout [ 103.110269][ T10] usb 1-1: config 4 interface 0 has no altsetting 0 [ 103.131906][ T10] usb 1-1: string descriptor 0 read error: -22 [ 103.139251][ T10] usb 1-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 103.148740][ T10] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 103.186054][ T10] usb 1-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 103.215798][ T10] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 103.249779][ T10] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 103.258117][ T10] usb 1-1: media controller created [ 103.292805][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 103.549969][ T6018] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.629920][ T6018] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.714698][ T9] usb 2-1: USB disconnect, device number 2 [ 103.903213][ T5160] Bluetooth: hci0: command 0x0c1a tx timeout [ 104.340348][ T6027] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 104.463110][ T10] zl10353_read_register: readreg error (reg=127, ret==0) [ 105.052121][ T5160] Bluetooth: hci1: command 0x0c1a tx timeout [ 105.102297][ T5160] Bluetooth: hci3: command 0x0c1a tx timeout [ 105.108584][ T5160] Bluetooth: hci2: command 0x0c1a tx timeout [ 105.184853][ T5160] Bluetooth: hci4: command 0x0c1a tx timeout [ 105.379352][ T10] usb 1-1: USB disconnect, device number 2 [ 105.984624][ T5160] Bluetooth: hci0: command 0x0c1a tx timeout [ 106.697573][ T43] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 106.873515][ T43] usb 3-1: Using ep0 maxpacket: 8 [ 106.902429][ T43] usb 3-1: unable to get BOS descriptor or descriptor too short [ 106.924579][ T43] usb 3-1: config 4 interface 0 has no altsetting 0 [ 106.943587][ T43] usb 3-1: string descriptor 0 read error: -22 [ 106.957626][ T43] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 106.984408][ T43] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 107.046491][ T43] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 107.089330][ T43] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 107.104353][ T5160] Bluetooth: hci1: command 0x0c1a tx timeout [ 107.132929][ T43] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 107.140246][ T43] usb 3-1: media controller created [ 107.183095][ T5851] Bluetooth: hci3: command 0x0c1a tx timeout [ 107.189289][ T5160] Bluetooth: hci2: command 0x0c1a tx timeout [ 107.204720][ T43] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 107.264546][ T5160] Bluetooth: hci4: command 0x0c1a tx timeout [ 107.438618][ T6059] input: syz0 as /devices/virtual/input/input5 [ 108.411501][ T43] zl10353_read_register: readreg error (reg=127, ret==0) [ 108.757097][ T6045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.881543][ T6045] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.199178][ T6062] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 109.472255][ T5160] Bluetooth: hci4: unexpected cc 0x040d length: 63 > 7 [ 109.482154][ T5160] Bluetooth: hci4: unexpected event for opcode 0x040d [ 109.647203][ T43] usb 3-1: USB disconnect, device number 2 [ 109.723652][ T924] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 110.399599][ T924] usb 4-1: config 0 has an invalid interface number: 69 but max is 0 [ 110.624838][ T924] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 110.636215][ T924] usb 4-1: config 0 has no interface number 0 [ 110.643488][ T924] usb 4-1: config 0 interface 69 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 110.653631][ T924] usb 4-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 0 [ 110.666534][ T924] usb 4-1: config 0 interface 69 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 110.692158][ T924] usb 4-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 110.701494][ T924] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.717124][ T924] usb 4-1: Product: syz [ 110.721422][ T924] usb 4-1: Manufacturer: syz [ 110.731715][ T924] usb 4-1: SerialNumber: syz [ 110.789178][ T924] usb 4-1: config 0 descriptor?? [ 110.872858][ T5160] Bluetooth: hci0: command 0x0c1a tx timeout [ 110.929220][ T924] cyberjack 4-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 110.976096][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 111.015063][ T924] cyberjack ttyUSB0: usb_submit_urb(read int) failed [ 112.321436][ T924] usb 4-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 112.603989][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.635535][ T924] usb 4-1: USB disconnect, device number 2 [ 112.647980][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.694120][ T9] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 112.694732][ T924] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 112.740130][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.763129][ T6090] netlink: 8 bytes leftover after parsing attributes in process `syz.2.36'. [ 112.863506][ T924] cyberjack 4-1:0.69: device disconnected [ 112.883481][ T6096] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.35'. [ 112.944931][ T6090] netlink: 36 bytes leftover after parsing attributes in process `syz.2.36'. [ 113.007819][ T6100] netlink: 'syz.3.37': attribute type 10 has an invalid length. [ 113.043527][ T9] usb 1-1: config 0 descriptor?? [ 113.166938][ T6100] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 113.206085][ T9] usb 1-1: can't set config #0, error -71 [ 113.470561][ T9] usb 1-1: USB disconnect, device number 3 [ 113.511915][ T5160] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 113.520968][ T5160] Bluetooth: hci4: Injecting HCI hardware error event [ 113.529330][ T5851] Bluetooth: hci4: hardware error 0x00 [ 113.677698][ T6106] netlink: 16 bytes leftover after parsing attributes in process `syz.4.40'. [ 115.614866][ T5851] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 116.421741][ T6113] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 117.103508][ T5851] Bluetooth: hci0: command 0x0c1a tx timeout [ 117.908617][ T6121] netlink: 'syz.4.46': attribute type 10 has an invalid length. [ 118.434988][ T6121] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 121.429475][ T6127] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 121.851575][ T6130] FAULT_INJECTION: forcing a failure. [ 121.851575][ T6130] name failslab, interval 1, probability 0, space 0, times 1 [ 121.872012][ T6135] capability: warning: `syz.0.48' uses deprecated v2 capabilities in a way that may be insecure [ 134.625263][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 136.113385][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 136.801961][ T6130] CPU: 1 UID: 0 PID: 6130 Comm: syz.1.50 Not tainted 6.16.0-rc6-syzkaller-00253-g4871b7cb27f4 #0 PREEMPT(full) [ 136.801992][ T6130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 136.802012][ T6130] Call Trace: [ 136.802025][ T6130] [ 136.802035][ T6130] dump_stack_lvl+0x189/0x250 [ 136.802071][ T6130] ? __pfx____ratelimit+0x10/0x10 [ 136.802093][ T6130] ? __pfx_dump_stack_lvl+0x10/0x10 [ 136.802116][ T6130] ? __pfx__printk+0x10/0x10 [ 136.802149][ T6130] ? ref_tracker_alloc+0x318/0x460 [ 136.802175][ T6130] should_fail_ex+0x414/0x560 [ 136.802200][ T6130] should_failslab+0xa8/0x100 [ 136.802225][ T6130] kmem_cache_alloc_noprof+0x73/0x3c0 [ 136.802244][ T6130] ? skb_clone+0x212/0x3a0 [ 136.802269][ T6130] skb_clone+0x212/0x3a0 [ 136.802292][ T6130] __netlink_deliver_tap+0x404/0x850 [ 136.802333][ T6130] ? netlink_deliver_tap+0x2e/0x1b0 [ 136.802362][ T6130] netlink_deliver_tap+0x19c/0x1b0 [ 136.802391][ T6130] netlink_unicast+0x730/0x8e0 [ 136.802467][ T6130] netlink_sendmsg+0x805/0xb30 [ 136.802506][ T6130] ? __pfx_netlink_sendmsg+0x10/0x10 [ 136.802543][ T6130] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 136.802564][ T6130] ? __pfx_netlink_sendmsg+0x10/0x10 [ 136.802592][ T6130] __sock_sendmsg+0x21c/0x270 [ 136.802619][ T6130] ____sys_sendmsg+0x505/0x830 [ 136.802655][ T6130] ? __pfx_____sys_sendmsg+0x10/0x10 [ 136.802696][ T6130] ? import_iovec+0x74/0xa0 [ 136.802728][ T6130] ___sys_sendmsg+0x21f/0x2a0 [ 136.802761][ T6130] ? __pfx____sys_sendmsg+0x10/0x10 [ 136.802831][ T6130] ? __fget_files+0x2a/0x420 [ 136.802853][ T6130] ? __fget_files+0x3a0/0x420 [ 136.802887][ T6130] __x64_sys_sendmsg+0x19b/0x260 [ 136.802926][ T6130] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 136.802967][ T6130] ? __pfx_ksys_write+0x10/0x10 [ 136.802984][ T6130] ? rcu_is_watching+0x15/0xb0 [ 136.803012][ T6130] ? do_syscall_64+0xbe/0x3b0 [ 136.803038][ T6130] do_syscall_64+0xfa/0x3b0 [ 136.803058][ T6130] ? lockdep_hardirqs_on+0x9c/0x150 [ 136.803078][ T6130] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.803098][ T6130] ? clear_bhb_loop+0x60/0xb0 [ 136.803123][ T6130] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.803142][ T6130] RIP: 0033:0x7f81d098e9a9 [ 136.803165][ T6130] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 136.803182][ T6130] RSP: 002b:00007f81d1731038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 136.803204][ T6130] RAX: ffffffffffffffda RBX: 00007f81d0bb5fa0 RCX: 00007f81d098e9a9 [ 136.803219][ T6130] RDX: 0000000000000014 RSI: 0000200000000240 RDI: 0000000000000003 [ 136.803231][ T6130] RBP: 00007f81d1731090 R08: 0000000000000000 R09: 0000000000000000 [ 136.803243][ T6130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 136.803255][ T6130] R13: 0000000000000000 R14: 00007f81d0bb5fa0 R15: 00007ffc6aedb0a8 [ 136.803287][ T6130] [ 136.961467][ T5842] sched: DL replenish lagged too much [ 139.302208][ T5160] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 139.372186][ T5160] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 139.401923][ T5160] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 139.462219][ T5160] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 139.470076][ T5160] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 140.677278][ T5851] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 140.702519][ T5851] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 140.710755][ T5851] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 140.722997][ T5851] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 140.731056][ T5851] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 141.576412][ T5160] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 141.583687][ T5855] Bluetooth: hci5: command tx timeout [ 141.611682][ T5160] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 141.620201][ T5160] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 141.633078][ T5160] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 141.641399][ T5160] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 141.932027][ T5851] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 141.948289][ T5851] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 141.960826][ T5851] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 141.970285][ T5851] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 141.980621][ T5851] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 142.140458][ T5160] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 142.155158][ T5160] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 142.164344][ T5160] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 142.174507][ T5160] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 142.182760][ T5160] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 142.320019][ T6151] chnl_net:caif_netlink_parms(): no params data found [ 142.788579][ T5851] Bluetooth: hci6: command tx timeout [ 143.662763][ T5851] Bluetooth: hci5: command tx timeout [ 143.743297][ T5851] Bluetooth: hci7: command tx timeout [ 144.062723][ T5851] Bluetooth: hci8: command tx timeout [ 144.102172][ T6153] chnl_net:caif_netlink_parms(): no params data found [ 144.121427][ T6151] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.132486][ T6151] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.139840][ T6151] bridge_slave_0: entered allmulticast mode [ 144.169041][ T6151] bridge_slave_0: entered promiscuous mode [ 144.198307][ T6151] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.213779][ T6151] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.221167][ T6151] bridge_slave_1: entered allmulticast mode [ 144.227891][ T5851] Bluetooth: hci9: command tx timeout [ 144.251337][ T6151] bridge_slave_1: entered promiscuous mode [ 144.559709][ T6151] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 144.731588][ T6151] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 144.862024][ T5851] Bluetooth: hci6: command tx timeout [ 144.972087][ T6153] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.989193][ T6153] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.997016][ T6153] bridge_slave_0: entered allmulticast mode [ 145.011636][ T6153] bridge_slave_0: entered promiscuous mode [ 145.034019][ T6153] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.041234][ T6153] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.063028][ T6153] bridge_slave_1: entered allmulticast mode [ 145.071080][ T6153] bridge_slave_1: entered promiscuous mode [ 145.116192][ T6151] team0: Port device team_slave_0 added [ 145.138464][ T6157] chnl_net:caif_netlink_parms(): no params data found [ 145.266578][ T6151] team0: Port device team_slave_1 added [ 145.370449][ T6153] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 145.485471][ T6153] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 145.600040][ T6151] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 145.620801][ T6151] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.666050][ T6151] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 145.755078][ T5851] Bluetooth: hci5: command tx timeout [ 145.784599][ T6160] chnl_net:caif_netlink_parms(): no params data found [ 145.821626][ T6151] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 145.861979][ T5851] Bluetooth: hci7: command tx timeout [ 145.906654][ T6151] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.971106][ T6151] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 146.143261][ T5851] Bluetooth: hci8: command tx timeout [ 146.269444][ T6153] team0: Port device team_slave_0 added [ 146.302542][ T5851] Bluetooth: hci9: command tx timeout [ 146.497079][ T6151] hsr_slave_0: entered promiscuous mode [ 146.505299][ T6151] hsr_slave_1: entered promiscuous mode [ 146.530862][ T6151] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 146.540504][ T6151] Cannot create hsr debugfs directory [ 146.576207][ T6153] team0: Port device team_slave_1 added [ 146.718958][ T6157] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.744192][ T6157] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.751560][ T6157] bridge_slave_0: entered allmulticast mode [ 146.775416][ T6157] bridge_slave_0: entered promiscuous mode [ 146.879076][ T6157] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.895125][ T6157] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.906946][ T6157] bridge_slave_1: entered allmulticast mode [ 146.918495][ T6157] bridge_slave_1: entered promiscuous mode [ 146.942692][ T5851] Bluetooth: hci6: command tx timeout [ 147.101694][ T6153] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 147.119404][ T6153] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.156384][ T6153] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 147.385352][ T6163] chnl_net:caif_netlink_parms(): no params data found [ 147.431061][ T6153] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 147.451385][ T6153] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.485759][ T6153] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 147.559256][ T6157] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 147.826022][ T5851] Bluetooth: hci5: command tx timeout [ 147.848925][ T6157] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 147.903263][ T5851] Bluetooth: hci7: command tx timeout [ 148.227747][ T5851] Bluetooth: hci8: command tx timeout [ 148.380932][ T6160] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.391903][ T5851] Bluetooth: hci9: command tx timeout [ 148.419720][ T6160] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.451168][ T6160] bridge_slave_0: entered allmulticast mode [ 148.482376][ T6160] bridge_slave_0: entered promiscuous mode [ 148.517616][ T6153] hsr_slave_0: entered promiscuous mode [ 148.546518][ T6153] hsr_slave_1: entered promiscuous mode [ 148.573154][ T6153] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 148.580781][ T6153] Cannot create hsr debugfs directory [ 148.706524][ T6157] team0: Port device team_slave_0 added [ 148.749728][ T6157] team0: Port device team_slave_1 added [ 148.892484][ T6160] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.899710][ T6160] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.926083][ T6160] bridge_slave_1: entered allmulticast mode [ 148.960885][ T6160] bridge_slave_1: entered promiscuous mode [ 149.022167][ T5851] Bluetooth: hci6: command tx timeout [ 149.515987][ T6157] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 149.531292][ T6157] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.568592][ T6157] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 149.760702][ T6157] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 149.776609][ T6157] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.818188][ T6157] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 149.866951][ T6163] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.882215][ T6163] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.889512][ T6163] bridge_slave_0: entered allmulticast mode [ 149.919964][ T6163] bridge_slave_0: entered promiscuous mode [ 149.950806][ T6160] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 149.982212][ T5851] Bluetooth: hci7: command tx timeout [ 150.010306][ T6163] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.019428][ T6163] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.032533][ T6163] bridge_slave_1: entered allmulticast mode [ 150.048851][ T6163] bridge_slave_1: entered promiscuous mode [ 150.118982][ T6160] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 150.302879][ T5851] Bluetooth: hci8: command tx timeout [ 150.322883][ T6163] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 150.464089][ T5851] Bluetooth: hci9: command tx timeout [ 150.510567][ T6163] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 150.596529][ T6160] team0: Port device team_slave_0 added [ 150.628872][ T6157] hsr_slave_0: entered promiscuous mode [ 150.642186][ T6157] hsr_slave_1: entered promiscuous mode [ 150.650206][ T6157] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 150.667319][ T6157] Cannot create hsr debugfs directory [ 150.811272][ T6160] team0: Port device team_slave_1 added [ 150.916072][ T6163] team0: Port device team_slave_0 added [ 151.083472][ T6163] team0: Port device team_slave_1 added [ 151.174788][ T6160] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 151.191940][ T6160] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 151.229274][ T6160] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 151.436776][ T6160] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 151.453412][ T6160] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 151.495854][ T6160] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 151.661415][ T6163] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 151.681409][ T6163] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 151.723483][ T6163] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 151.865826][ T6163] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 151.880034][ T6163] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 151.916432][ T6163] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 152.064090][ T6160] hsr_slave_0: entered promiscuous mode [ 152.078651][ T6160] hsr_slave_1: entered promiscuous mode [ 152.086965][ T6160] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 152.103436][ T6160] Cannot create hsr debugfs directory [ 152.121867][ T6151] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 152.162328][ T6151] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 152.268879][ T6151] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 152.500297][ T6151] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 152.691221][ T6163] hsr_slave_0: entered promiscuous mode [ 152.701302][ T6163] hsr_slave_1: entered promiscuous mode [ 152.729725][ T6163] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 152.747791][ T6163] Cannot create hsr debugfs directory [ 153.090360][ T6153] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 153.318955][ T6153] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 153.392002][ T6153] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 153.500948][ T6153] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 153.952458][ T6157] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 154.055908][ T6157] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 154.148372][ T6157] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 154.179928][ T6157] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 154.241308][ T6151] 8021q: adding VLAN 0 to HW filter on device bond0 [ 154.374397][ T6160] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 154.493071][ T6160] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 154.524549][ T6151] 8021q: adding VLAN 0 to HW filter on device team0 [ 154.588077][ T6160] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 154.669016][ T6160] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 154.749756][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.757005][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 154.833073][ T3544] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.840276][ T3544] bridge0: port 2(bridge_slave_1) entered forwarding state [ 154.936895][ T6163] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 154.969366][ T6163] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 155.091229][ T6163] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 155.198925][ T6163] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 155.251482][ T6153] 8021q: adding VLAN 0 to HW filter on device bond0 [ 155.408871][ T6153] 8021q: adding VLAN 0 to HW filter on device team0 [ 155.461414][ T6157] 8021q: adding VLAN 0 to HW filter on device bond0 [ 155.537258][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.545191][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.670571][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.677901][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.923618][ T6157] 8021q: adding VLAN 0 to HW filter on device team0 [ 156.007825][ T3544] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.015064][ T3544] bridge0: port 1(bridge_slave_0) entered forwarding state [ 156.219432][ T6153] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 156.280544][ T6153] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 156.357348][ T1160] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.364719][ T1160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 156.601581][ T6160] 8021q: adding VLAN 0 to HW filter on device bond0 [ 156.689281][ T6163] 8021q: adding VLAN 0 to HW filter on device bond0 [ 156.737797][ T6151] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 156.966188][ T6160] 8021q: adding VLAN 0 to HW filter on device team0 [ 157.029051][ T6163] 8021q: adding VLAN 0 to HW filter on device team0 [ 157.149789][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.157110][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 157.301319][ T1160] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.308576][ T1160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 157.401368][ T1160] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.408636][ T1160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 157.586293][ T1160] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.593560][ T1160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 158.030391][ T6153] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 158.696180][ T6157] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 159.338286][ T6151] veth0_vlan: entered promiscuous mode [ 159.519060][ T6151] veth1_vlan: entered promiscuous mode [ 159.700277][ T6160] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 160.048917][ T6151] veth0_macvtap: entered promiscuous mode [ 160.124277][ T6151] veth1_macvtap: entered promiscuous mode [ 160.270399][ T6163] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 160.631711][ T3544] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.216130][ T6151] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 164.459357][ T6151] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 164.593172][ T6153] veth0_vlan: entered promiscuous mode [ 164.666565][ T6151] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.716420][ T6151] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.754971][ T6151] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.776732][ T6151] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.953764][ T6153] veth1_vlan: entered promiscuous mode [ 165.344195][ T6157] veth0_vlan: entered promiscuous mode [ 165.527500][ T6157] veth1_vlan: entered promiscuous mode [ 165.546728][ T6153] veth0_macvtap: entered promiscuous mode [ 165.621132][ T6153] veth1_macvtap: entered promiscuous mode [ 165.699589][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 165.729357][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 165.830683][ T6153] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 165.910442][ T6153] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 165.987421][ T6160] veth0_vlan: entered promiscuous mode [ 166.027080][ T6153] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.046785][ T6153] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.059286][ T6153] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.086502][ T6153] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.120850][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 166.130949][ T6163] veth0_vlan: entered promiscuous mode [ 166.153838][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 166.186896][ T6157] veth0_macvtap: entered promiscuous mode [ 166.221746][ T6163] veth1_vlan: entered promiscuous mode [ 166.250596][ T6160] veth1_vlan: entered promiscuous mode [ 166.294859][ T6157] veth1_macvtap: entered promiscuous mode [ 166.430022][ T6157] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 166.566606][ T6157] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 166.772935][ T6163] veth0_macvtap: entered promiscuous mode [ 166.859341][ T6160] veth0_macvtap: entered promiscuous mode [ 166.888359][ T6157] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.938568][ T6157] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.954341][ T6157] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.969281][ T6157] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.048421][ T6163] veth1_macvtap: entered promiscuous mode [ 167.068885][ T6160] veth1_macvtap: entered promiscuous mode [ 167.131691][ T3572] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 167.170315][ T3572] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 167.307527][ T6163] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 167.419105][ T6160] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 167.458404][ T6163] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 167.527320][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 167.538817][ T6163] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.561592][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 167.571864][ T6163] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.596261][ T6163] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.636866][ T6163] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.659663][ T6160] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 167.765652][ T6160] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.783626][ T6160] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.799198][ T6160] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.810648][ T6160] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.881288][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 167.948392][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.011977][ T1092] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 174.020125][ T1092] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 175.131327][ T1149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.182253][ T1149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.390342][ T3544] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.405898][ T6289] netlink: 4 bytes leftover after parsing attributes in process `syz.6.57'. [ 177.939855][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 178.222322][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 178.285615][ T6287] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 178.421895][ T6287] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.792295][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.881567][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.760012][ T3544] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.062710][ T5923] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 192.423534][ T5923] usb 9-1: Using ep0 maxpacket: 16 [ 194.317695][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.324238][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 323.591750][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 323.598975][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P6321/1:b..l P6157/1:b..l [ 323.608332][ C0] rcu: (detected by 0, t=10502 jiffies, g=14849, q=843442 ncpus=2) [ 323.616323][ C0] task:syz-executor state:R running task stack:21000 pid:6157 tgid:6157 ppid:6148 task_flags:0x400140 flags:0x00004002 [ 323.630395][ C0] Call Trace: [ 323.633863][ C0] [ 323.636817][ C0] __schedule+0x16a2/0x4cb0 [ 323.641358][ C0] ? ip_local_deliver_finish+0x389/0x580 [ 323.647030][ C0] ? preempt_schedule_irq+0xb5/0x150 [ 323.652333][ C0] ? __pfx___schedule+0x10/0x10 [ 323.657196][ C0] ? NF_HOOK+0x30c/0x3a0 [ 323.661447][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 323.667447][ C0] ? NF_HOOK+0x9a/0x3a0 [ 323.671644][ C0] ? preempt_schedule_irq+0xaa/0x150 [ 323.676945][ C0] preempt_schedule_irq+0xb5/0x150 [ 323.682059][ C0] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 323.687800][ C0] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 323.693630][ C0] irqentry_exit+0x6f/0x90 [ 323.698066][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 323.704058][ C0] RIP: 0010:kasan_check_range+0x5/0x2c0 [ 323.709619][ C0] Code: b7 8d e8 1e 5e e4 ff 90 0f 0b cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 55 <41> 57 41 56 41 55 41 54 53 b0 01 48 85 f6 0f 84 ba 01 00 00 4c 8d [ 323.729319][ C0] RSP: 0018:ffffc90003887328 EFLAGS: 00000246 [ 323.735665][ C0] RAX: 1ffff92000710e8c RBX: 0000000000000010 RCX: ffffffff8172b6d8 [ 323.743664][ C0] RDX: 0000000000000001 RSI: 0000000000000010 RDI: ffffc90003887478 [ 323.751780][ C0] RBP: 0000000000000000 R08: 0000000000000005 R09: ffffffff8172aae5 [ 323.759774][ C0] R10: ffffc90003887478 R11: ffffffff81acff40 R12: ffffc90003887ea0 [ 323.767761][ C0] R13: ffffc90003887478 R14: ffffc90003887478 R15: ffffc90003887470 [ 323.775773][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 323.781952][ C0] ? unwind_next_frame+0xa5/0x2390 [ 323.787073][ C0] ? unwind_next_frame+0xc98/0x2390 [ 323.792295][ C0] ? unwind_next_frame+0xa5/0x2390 [ 323.797433][ C0] __asan_memset+0x22/0x50 [ 323.801867][ C0] unwind_next_frame+0xc98/0x2390 [ 323.807026][ C0] ? unwind_next_frame+0xa5/0x2390 [ 323.812163][ C0] ? do_sys_openat2+0x121/0x1c0 [ 323.817044][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 323.823219][ C0] arch_stack_walk+0x11c/0x150 [ 323.828004][ C0] ? __x64_sys_openat+0x138/0x170 [ 323.833056][ C0] stack_trace_save+0x9c/0xe0 [ 323.837744][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 323.843137][ C0] save_stack+0xf7/0x1f0 [ 323.847399][ C0] ? __pfx_save_stack+0x10/0x10 [ 323.852256][ C0] ? __free_frozen_pages+0xc65/0xe60 [ 323.857549][ C0] ? __put_partials+0x161/0x1c0 [ 323.862405][ C0] ? put_cpu_partial+0x17c/0x250 [ 323.867364][ C0] ? __slab_free+0x2f7/0x400 [ 323.872016][ C0] ? qlist_free_all+0x97/0x140 [ 323.876828][ C0] ? kasan_quarantine_reduce+0x148/0x160 [ 323.882518][ C0] ? __kasan_slab_alloc+0x22/0x80 [ 323.887556][ C0] ? kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 323.893201][ C0] ? alloc_empty_file+0x55/0x1d0 [ 323.898161][ C0] ? path_openat+0x107/0x3830 [ 323.902868][ C0] ? do_filp_open+0x1fa/0x410 [ 323.907641][ C0] ? do_sys_openat2+0x121/0x1c0 [ 323.912536][ C0] __reset_page_owner+0x71/0x1f0 [ 323.917494][ C0] __free_frozen_pages+0xc65/0xe60 [ 323.922627][ C0] __put_partials+0x161/0x1c0 [ 323.927324][ C0] put_cpu_partial+0x17c/0x250 [ 323.932114][ C0] ? put_cpu_partial+0x6d/0x250 [ 323.936988][ C0] __slab_free+0x2f7/0x400 [ 323.941417][ C0] ? __phys_addr+0xd3/0x180 [ 323.945946][ C0] qlist_free_all+0x97/0x140 [ 323.950558][ C0] kasan_quarantine_reduce+0x148/0x160 [ 323.956120][ C0] __kasan_slab_alloc+0x22/0x80 [ 323.960981][ C0] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 323.966443][ C0] ? alloc_empty_file+0x55/0x1d0 [ 323.971394][ C0] alloc_empty_file+0x55/0x1d0 [ 323.976187][ C0] path_openat+0x107/0x3830 [ 323.980730][ C0] ? arch_stack_walk+0xfc/0x150 [ 323.985640][ C0] ? kasan_save_track+0x4f/0x80 [ 323.990511][ C0] ? kasan_save_track+0x3e/0x80 [ 323.995379][ C0] ? __kasan_slab_alloc+0x6c/0x80 [ 324.000412][ C0] ? getname_flags+0xb8/0x540 [ 324.005218][ C0] ? __pfx_path_openat+0x10/0x10 [ 324.010165][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.016270][ C0] do_filp_open+0x1fa/0x410 [ 324.020788][ C0] ? __lock_acquire+0xab9/0xd20 [ 324.025661][ C0] ? __pfx_do_filp_open+0x10/0x10 [ 324.030717][ C0] ? _raw_spin_unlock+0x28/0x50 [ 324.035582][ C0] ? alloc_fd+0x64c/0x6c0 [ 324.040027][ C0] do_sys_openat2+0x121/0x1c0 [ 324.044728][ C0] ? __pfx_do_sys_openat2+0x10/0x10 [ 324.049949][ C0] ? rcu_is_watching+0x15/0xb0 [ 324.054722][ C0] __x64_sys_openat+0x138/0x170 [ 324.059588][ C0] do_syscall_64+0xfa/0x3b0 [ 324.064104][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.070174][ C0] ? asm_common_interrupt+0x26/0x40 [ 324.075380][ C0] ? clear_bhb_loop+0x60/0xb0 [ 324.080089][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.086013][ C0] RIP: 0033:0x7fcbee98e2a1 [ 324.090443][ C0] RSP: 002b:00007ffd5793fb90 EFLAGS: 00000287 ORIG_RAX: 0000000000000101 [ 324.098885][ C0] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 00007fcbee98e2a1 [ 324.106975][ C0] RDX: 0000000000090800 RSI: 00007fcbeea11089 RDI: 00000000ffffff9c [ 324.114973][ C0] RBP: 00007ffd5793fc3c R08: 0000000000000000 R09: 0000000000000000 [ 324.122958][ C0] R10: 0000000000000000 R11: 0000000000000287 R12: 0000000000000002 [ 324.130952][ C0] R13: 0000000000000000 R14: 000000000002cea2 R15: 00007ffd5793fc90 [ 324.138948][ C0] [ 324.141984][ C0] task:syz.6.65 state:R running task stack:26888 pid:6321 tgid:6319 ppid:6153 task_flags:0x40044c flags:0x00004006 [ 324.155484][ C0] Call Trace: [ 324.158783][ C0] [ 324.161743][ C0] __schedule+0x16a2/0x4cb0 [ 324.166286][ C0] ? preempt_schedule_common+0x83/0xd0 [ 324.171779][ C0] ? __pfx___schedule+0x10/0x10 [ 324.176665][ C0] ? do_raw_spin_lock+0x121/0x290 [ 324.181830][ C0] ? preempt_schedule+0xae/0xc0 [ 324.186742][ C0] preempt_schedule_common+0x83/0xd0 [ 324.192043][ C0] preempt_schedule+0xae/0xc0 [ 324.196739][ C0] ? __pfx_preempt_schedule+0x10/0x10 [ 324.202147][ C0] preempt_schedule_thunk+0x16/0x30 [ 324.207369][ C0] _raw_spin_unlock+0x3f/0x50 [ 324.212059][ C0] unmap_page_range+0x3842/0x41c0 [ 324.217145][ C0] ? __pfx_unmap_page_range+0x10/0x10 [ 324.222536][ C0] ? unmap_vmas+0x144/0x580 [ 324.227051][ C0] unmap_vmas+0x399/0x580 [ 324.231399][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 324.236277][ C0] exit_mmap+0x248/0xb50 [ 324.240528][ C0] ? uprobe_clear_state+0x20f/0x290 [ 324.245737][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 324.250532][ C0] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 324.256269][ C0] ? __pfx_exit_aio+0x10/0x10 [ 324.260956][ C0] ? uprobe_clear_state+0x274/0x290 [ 324.266156][ C0] ? mm_update_next_owner+0xa7/0x870 [ 324.271452][ C0] __mmput+0x118/0x410 [ 324.275528][ C0] exit_mm+0x1da/0x2c0 [ 324.279616][ C0] ? __pfx_exit_mm+0x10/0x10 [ 324.284240][ C0] ? rcu_is_watching+0x15/0xb0 [ 324.289051][ C0] do_exit+0x648/0x22e0 [ 324.293327][ C0] ? do_raw_spin_lock+0x121/0x290 [ 324.298368][ C0] ? __pfx_do_exit+0x10/0x10 [ 324.302981][ C0] do_group_exit+0x21c/0x2d0 [ 324.307586][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 324.312799][ C0] get_signal+0x125e/0x1310 [ 324.317326][ C0] arch_do_signal_or_restart+0x9a/0x750 [ 324.322893][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 324.328122][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 324.334311][ C0] ? exit_to_user_mode_loop+0x40/0x110 [ 324.339788][ C0] exit_to_user_mode_loop+0x75/0x110 [ 324.345098][ C0] do_syscall_64+0x2bd/0x3b0 [ 324.349721][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.355792][ C0] ? __switch_to_asm+0x39/0x70 [ 324.360566][ C0] ? clear_bhb_loop+0x60/0xb0 [ 324.365267][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.371169][ C0] RIP: 0033:0x7f9af3f8e5ab [ 324.375601][ C0] RSP: 002b:00007f9af4d24060 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 324.384038][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f9af3f8e5ab [ 324.392048][ C0] RDX: 0000000000000000 RSI: 0000000000006364 RDI: 00000000000000d9 [ 324.400037][ C0] RBP: 00007f9af41b6080 R08: 00007ffcbe3493a7 R09: 0000000000000000 [ 324.408016][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9af41b608c [ 324.416081][ C0] R13: 0000000000000001 R14: 00007ffcbe3492c0 R15: 00007ffcbe3493a8 [ 324.424076][ C0] [ 324.427115][ C0] rcu: rcu_preempt kthread starved for 10446 jiffies! g14849 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 324.438325][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 324.448314][ C0] rcu: RCU grace-period kthread stack dump: [ 324.454396][ C0] task:rcu_preempt state:R running task stack:26792 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 324.467900][ C0] Call Trace: [ 324.471194][ C0] [ 324.474135][ C0] __schedule+0x16a2/0x4cb0 [ 324.478670][ C0] ? schedule+0x165/0x360 [ 324.483008][ C0] ? __pfx___schedule+0x10/0x10 [ 324.487909][ C0] ? schedule+0x91/0x360 [ 324.492268][ C0] schedule+0x165/0x360 [ 324.496447][ C0] schedule_timeout+0x12b/0x270 [ 324.501309][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 324.506702][ C0] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 324.512613][ C0] ? __pfx_process_timeout+0x10/0x10 [ 324.517926][ C0] ? prepare_to_swait_event+0x341/0x380 [ 324.523493][ C0] rcu_gp_fqs_loop+0x301/0x1540 [ 324.528364][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 324.534530][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 324.539825][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 324.545061][ C0] rcu_gp_kthread+0x99/0x390 [ 324.549668][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 324.554878][ C0] ? __kthread_parkme+0x7b/0x200 [ 324.559846][ C0] ? __kthread_parkme+0x1a1/0x200 [ 324.564900][ C0] kthread+0x711/0x8a0 [ 324.569005][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 324.574212][ C0] ? __pfx_kthread+0x10/0x10 [ 324.578814][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 324.584025][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 324.589244][ C0] ? __pfx_kthread+0x10/0x10 [ 324.593876][ C0] ret_from_fork+0x3fc/0x770 [ 324.598495][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 324.603706][ C0] ? __switch_to_asm+0x39/0x70 [ 324.608481][ C0] ? __switch_to_asm+0x33/0x70 [ 324.613268][ C0] ? __pfx_kthread+0x10/0x10 [ 324.617874][ C0] ret_from_fork_asm+0x1a/0x30 [ 324.622673][ C0] [ 324.625696][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 324.632029][ C0] Sending NMI from CPU 0 to CPUs 1: [ 324.637264][ C1] NMI backtrace for cpu 1 [ 324.637284][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.16.0-rc6-syzkaller-00253-g4871b7cb27f4 #0 PREEMPT(full) [ 324.637304][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 324.637314][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 324.637334][ C1] Code: 93 de 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d d3 cd 21 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 324.637348][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c2 [ 324.637363][ C1] RAX: d399ee20dbf41100 RBX: ffffffff81976938 RCX: d399ee20dbf41100 [ 324.637376][ C1] RDX: 0000000000000001 RSI: ffffffff8d982766 RDI: ffffffff8be1b8c0 [ 324.637388][ C1] RBP: ffffc90000197f20 R08: ffff8880b8732f5b R09: 1ffff110170e65eb [ 324.637400][ C1] R10: dffffc0000000000 R11: ffffed10170e65ec R12: ffffffff8fa0acf0 [ 324.637413][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff11003a57b40 [ 324.637424][ C1] FS: 0000000000000000(0000) GS:ffff888125d59000(0000) knlGS:0000000000000000 [ 324.637437][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 324.637449][ C1] CR2: 00007f8416600218 CR3: 000000006bbce000 CR4: 00000000003526f0 [ 324.637464][ C1] Call Trace: [ 324.637471][ C1] [ 324.637477][ C1] default_idle+0x13/0x20 [ 324.637496][ C1] default_idle_call+0x74/0xb0 [ 324.637516][ C1] do_idle+0x1e8/0x510 [ 324.637535][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 324.637554][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 324.637570][ C1] ? __pfx_do_idle+0x10/0x10 [ 324.637594][ C1] ? do_idle+0x4ef/0x510 [ 324.637614][ C1] cpu_startup_entry+0x44/0x60 [ 324.637632][ C1] start_secondary+0x101/0x110 [ 324.637657][ C1] common_startup_64+0x13e/0x147 [ 324.637687][ C1] [ 324.842637][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 324.849183][ T1304] ieee802154 phy1 wpan1: encryption failed: -22