last executing test programs: 14.301818964s ago: executing program 1 (id=73): r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x7, 0x2, 0x1, "5ee9f7e6accae6951fc3796de8ecd392a635ea32360379ec280ffde5ef6765ba", 0x43564548}) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000002c0), 0x2441, 0x0) ioctl$SNDCTL_SEQ_THRESHOLD(r1, 0x4004510d, &(0x7f0000000400)=0xb8e7) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') lseek(r3, 0x1000000, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) init_module(&(0x7f0000000580)=ANY=[@ANYRES8=r3], 0x78, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_COLLECT_METADATA={0x4}, @IFLA_GENEVE_PORT={0x6, 0x5, 0x4e23}, @IFLA_GENEVE_TTL_INHERIT={0x5}]}}}]}, 0x48}}, 0x48000) r5 = fsopen(&(0x7f0000000180)='binder\x00', 0x1) ioctl$EXT4_IOC_GROUP_ADD(r5, 0x40286608, &(0x7f0000000240)={0xb8b, 0x89, 0xa57, 0x9, 0x2, 0x4}) bind$nfc_llcp(r4, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x10000000000001}, 0x60) r6 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x10000, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r7, 0xffffffffffffffff, 0x0) r8 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_control_io(r8, 0x0, &(0x7f0000000c40)={0x84, &(0x7f0000000780)=ANY=[@ANYBLOB='\x00\x00.'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 11.086901986s ago: executing program 1 (id=80): r0 = socket$inet(0x2, 0x1, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) flistxattr(r0, &(0x7f0000000b40)=""/224, 0xe0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) semget$private(0x0, 0x20000000102, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0], 0x0, 0x22, &(0x7f0000000240)=[{}, {}], 0x10, 0x10, &(0x7f0000000280), 0x0, 0x0, 0xa7, 0x8, 0x0, 0x0}}, 0x10) ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) r2 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x1ff, 0x20000) fsopen(&(0x7f0000000300)='iso9660\x00', 0x1) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f0000000540)={{0x1, 0x3, 0x6, 0x448, '\x00', 0x400}, 0x1, [0x7, 0xd5, 0x5, 0x9, 0x6, 0xa, 0x2, 0x2005, 0xfffffffffffffffb, 0xbd, 0x80000000, 0x102d, 0x8, 0x1, 0x3, 0xffffffffffffffff, 0x1, 0xfff, 0x6, 0x1ff, 0x80, 0x7, 0x7, 0x7, 0xc, 0x2, 0x9, 0x7, 0xffffffffffffffff, 0x3, 0x8fffffffe, 0x403, 0x1, 0x4, 0x1, 0x3, 0x3, 0x1, 0x0, 0x6, 0x9, 0x4, 0x8a, 0x50f, 0x9ac2, 0x6fe5, 0xffffffffba36ba58, 0x6, 0xa, 0x9, 0x6, 0xe000000000000000, 0xfffffffffffffffd, 0x403, 0x3, 0xfffffffffffff8f6, 0x4, 0xfffffffffffffff9, 0x0, 0xf9800000, 0x8, 0xd, 0x1800000, 0x4, 0x82b, 0x8, 0x5, 0x0, 0x4, 0xfffffffffffffffa, 0x8, 0x100000000000006, 0xca4f, 0x2f, 0x1, 0x7, 0x40, 0x2, 0x42843379, 0x1, 0x8, 0x201, 0x77d, 0xb3, 0x5, 0x6, 0xa2, 0x6, 0x0, 0x7, 0x4, 0x7fffffffffffffff, 0x7, 0x8, 0x0, 0x9, 0x93, 0x5, 0x3ff, 0x2, 0x2775e12f, 0x680000000000, 0x5, 0x40007, 0xe88, 0x80000005, 0x0, 0xfffffffffffffffa, 0x10001, 0x5, 0x8, 0x1000, 0x0, 0x5, 0x7, 0xfffffffffffff000, 0x8, 0x7ffd, 0xfffffffffffffff7, 0x6, 0x100000001, 0x8, 0x2, 0x6, 0x20000000004, 0xc3, 0x7f, 0x3]}) 11.072079606s ago: executing program 3 (id=81): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) msync(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2) syz_emit_ethernet(0x3a, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa210106, @local, {[@ssrr={0x89, 0x3, 0xe9}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x20, 0x8000}}}}}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000004c00)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0xa4}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}, @exit={0x95, 0x0, 0x700}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x9, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x6}, 0x70) syz_open_dev$video(&(0x7f00000003c0), 0x200, 0x2000) eventfd(0xbd7b) 9.33106671s ago: executing program 3 (id=82): socket$nl_generic(0x10, 0x3, 0x10) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) io_getevents(0x0, 0x257, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) io_submit(0x0, 0x0, &(0x7f0000000280)) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) r1 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPIOCGCHAN(r1, 0x80047437, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port1\x00', 0x72, 0x11cfa, 0x0, 0x8000007, 0x3, 0x4, 0x1, 0x0, 0x5}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x40505330, &(0x7f00000001c0)={0x800100, 0xffffffff, 0x22, 0xe1d9, 0x1101, 0xff}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x40505330, &(0x7f0000000140)={0x800100, 0xffffffff, 0x2, 0xe1db, 0x1101, 0xff}) close(r2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)={0x3c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@cf_end_cf_ack={{}, {0xa}, @device_a, @device_b}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x44800) 9.249651821s ago: executing program 1 (id=84): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0) sendfile(r1, r1, 0x0, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6e, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000001c0)={0x1, 0x0, 0x401}, 0x10}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x80000400) getpid() sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) 8.535501145s ago: executing program 2 (id=85): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) r2 = getpid() setrlimit(0xb, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mlock2(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0) mlock2(&(0x7f0000a20000/0x1000)=nil, 0x1000, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r5 = add_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f0000000500)={'syz', 0x3}, &(0x7f0000000040)="42d7386debb9c100", 0x8, 0xfffffffffffffffe) keyctl$read(0xb, r5, 0x0, 0x0) r6 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r6, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000100)=0xc081, 0x4) sched_setscheduler(0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x1}}, 0x30) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, &(0x7f0000004180)={0x2020}, 0x2020) 8.398743837s ago: executing program 3 (id=87): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x0) msync(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x7, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa210106, @local, {[@ssrr={0x89, 0x3, 0xe9}, @generic={0x7, 0x2}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x20, 0x8000}}}}}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000004c00)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0xa4}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}, @exit={0x95, 0x0, 0x700}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x9, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x6}, 0x70) syz_open_dev$video(&(0x7f00000003c0), 0x200, 0x2000) eventfd(0xbd7b) io_submit(0x0, 0x0, 0x0) 6.803200058s ago: executing program 2 (id=88): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205647, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) r3 = socket$inet(0x2, 0x801, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) pipe2(&(0x7f0000000100), 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) recvmmsg(r4, &(0x7f0000007700), 0x318, 0xfc0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') preadv(r6, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/190, 0xbe}], 0x1, 0x189, 0x100) sendmsg$IPVS_CMD_ZERO(r6, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="002db2b8124b3a787944", @ANYRES16=0x0, @ANYBLOB="00042cbd7000fedbdf2510000000080005000b000000300003801400020069703667726574617030000000000000060004000400000005"], 0x98}, 0x1, 0x0, 0x0, 0x8010}, 0x40400c0) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000508000a40000000000900020073797a31000000000900010073797a300000000008000540000000213c0000001e0a0501000000000000"], 0xc0}}, 0x0) 6.70635324s ago: executing program 0 (id=89): socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x50) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) io_setup(0x6, &(0x7f00000000c0)=0x0) io_getevents(r0, 0x257, 0x1, &(0x7f0000000240)=[{}], 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="07000000040000001800000042a000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000f2ff17000000000000001b00d88137f76d5b3d00"/35], 0x48) io_submit(r0, 0x0, &(0x7f0000000280)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) r2 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPIOCGCHAN(r2, 0x80047437, 0x0) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000020000000000006bb55a2a630bf7c045f94cd977", 0x18, 0xffffffffffffffff) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port1\x00', 0x72, 0x11cfa, 0x0, 0x8000007, 0x3, 0x4, 0x1, 0x0, 0x5}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x40505330, &(0x7f00000001c0)={0x800100, 0xffffffff, 0x22, 0xe1d9, 0x1101, 0xff}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x40505330, &(0x7f0000000140)={0x800100, 0xffffffff, 0x2, 0xe1db, 0x1101, 0xff}) close(r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)={0x3c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@cf_end_cf_ack={{}, {0xa}, @device_a, @device_b}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x44800) 6.555724433s ago: executing program 3 (id=90): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205647, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) r3 = socket$inet(0x2, 0x801, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) pipe2(&(0x7f0000000100), 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) recvmmsg(r4, &(0x7f0000007700), 0x318, 0xfc0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') preadv(r6, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/190, 0xbe}], 0x1, 0x189, 0x100) sendmsg$IPVS_CMD_ZERO(r6, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="002db2b8124b3a787944", @ANYRES16=0x0, @ANYBLOB="00042cbd7000fedbdf2510000000080005000b000000300003801400020069703667726574617030000000000000060004000400000005"], 0x98}, 0x1, 0x0, 0x0, 0x8010}, 0x40400c0) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000508000a40000000000900020073797a31000000000900010073797a300000000008000540000000213c0000001e0a0501000000000000"], 0xc0}}, 0x0) 5.754917158s ago: executing program 2 (id=91): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[], 0x113c}, 0x1, 0x0, 0x0, 0x4000001}, 0x800) 5.67983296s ago: executing program 0 (id=92): r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad", 0x1) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x800000000, 0x10000000000f, &(0x7f0000006680)) clock_adjtime(0x0, &(0x7f0000000100)={0x362, 0x6a, 0x55cd, 0x8000000000000001, 0x48c, 0x5, 0xd, 0x424, 0x2, 0xffffffffffffffff, 0xf423f, 0xfffffffffffffff9, 0xe6, 0x2, 0x1000000081, 0x5, 0x0, 0x5, 0x2, 0x9220000000000000, 0x3, 0x0, 0x80000001, 0x0, 0x5, 0x7}) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) 5.056482162s ago: executing program 1 (id=93): sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16, @ANYBLOB="050000000000000000", @ANYRES32, @ANYBLOB="3d000e0080000000ffffffffffff080211000000ffffffffffff0000feffffffffffffff070001000406f0027f0006a7000c006400000008000d000000000073f68ac399765b7ab289a21d254ebf1c30920188d7e0527bff31151da7c57628327841e9134f4b1b378bcbf5a202"], 0x70}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb0800", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850", 0x4, 0xfffffffffffffffe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='H\x00\x00\x00'], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 4.975163254s ago: executing program 2 (id=94): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x0) msync(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x7, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa210106, @local, {[@ssrr={0x89, 0x3, 0xe9}, @generic={0x7, 0x2}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x20, 0x8000}}}}}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000004c00)=""/102392, 0x18ff8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0xa4}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}, @exit={0x95, 0x0, 0x700}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x9, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x6}, 0x70) r2 = syz_open_dev$video(0x0, 0x200, 0x2000) r3 = eventfd(0xbd7b) io_submit(0x0, 0x6, &(0x7f0000000700)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x6, 0x7, r1, &(0x7f0000000200)="0cdeab6ec848ddf96b42488db1947bb8fe14669fedac45b83b6151c85f04718df487ecd33d2f2998fb084f599824001feb051a8587c4cef9c77d6d659985", 0x3e, 0x8000000000000000, 0x0, 0x1}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x7, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x65d5, 0x0, 0x0, r1}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x7, 0x1, 0xffffffffffffffff, &(0x7f0000000380)="6a2e746098935fb6527f3d62ed852e42a73d63d9c5929817b512fc96c0c5c249fc4bde4b354208895c86e690f32a0cf27e01850d6a68787794148d84fc685b4b7e71d5eee6e5aa2e2cde39b7ef8c2ca13c51148e717f28b4d280b956a0059a853c14d7c02b24d66d59ebf798bd0235898c467fed99038087ad5de90e1f144428278fa76c9acb52c2ac6a6d8a5b4d6f08449f7e19daf6b2ac30f525abaff332fb26739e3acaaba8e6286e133482c5a2055f736453ed7d7bff07982f9c43", 0xbd, 0x8, 0x0, 0x1}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x8, 0x4, r2, &(0x7f0000000540)="ee352ae1f741ebd616a1e1cd0335415269c56891a20482502a9d5744a7c1d463cc2fdee29565b6d8721b0786f1a847b4ebc7c7f78438a71660e012d235fa3cad92e18635d3ae05c5fc5e5dd4a1890619b55ed98f231e2ce23ae0b409b9fe8db53259c434e165f756d631896326c04b010f3ded346021c5069ea3e27bc1ce1b2f158e7b75ad531ba747ea5e58101945fba3cc8bcc441a0ebc04c5811a958b6f63a0a9771fb02e4dc1c2259c3a77e792b11fffa6c44e731033fea4", 0xba, 0xffffffff, 0x0, 0x3, r3}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000900)="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", 0xffc, 0x7, 0x0, 0x1, r0}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x8, 0x4, r0, &(0x7f0000001900)="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", 0x600, 0x9, 0x0, 0x2}]) 4.409739054s ago: executing program 0 (id=95): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0xc00, &(0x7f0000001180)=ANY=[@ANYBLOB='quota,usrquota_inode_hardlimit=7']) chdir(&(0x7f0000000240)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x6e) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x8000, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000200)='./file1\x00', 0x0) 4.228427818s ago: executing program 2 (id=96): socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x50) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) io_setup(0x6, &(0x7f00000000c0)=0x0) io_getevents(r0, 0x257, 0x1, &(0x7f0000000240)=[{}], 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="07000000040000001800000042a000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000f2ff17000000000000001b00d88137f76d5b3d00"/35], 0x48) io_submit(r0, 0x0, &(0x7f0000000280)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) r2 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPIOCGCHAN(r2, 0x80047437, 0x0) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000020000000000006bb55a2a630bf7c045f94cd977", 0x18, 0xffffffffffffffff) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port1\x00', 0x72, 0x11cfa, 0x0, 0x8000007, 0x3, 0x4, 0x1, 0x0, 0x5}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x40505330, &(0x7f00000001c0)={0x800100, 0xffffffff, 0x22, 0xe1d9, 0x1101, 0xff}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x40505330, &(0x7f0000000140)={0x800100, 0xffffffff, 0x2, 0xe1db, 0x1101, 0xff}) close(r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)={0x3c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@cf_end_cf_ack={{}, {0xa}, @device_a, @device_b}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x44800) 4.175202739s ago: executing program 1 (id=97): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socket$pppl2tp(0x18, 0x1, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') 4.012488793s ago: executing program 0 (id=98): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008000}, 0x0) msync(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x7, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa210106, @local, {[@ssrr={0x89, 0x3, 0xe9}, @generic={0x7, 0x2}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x20, 0x8000}}}}}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000004c00)=""/102392, 0x18ff8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0xa4}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}, @exit={0x95, 0x0, 0x700}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x9, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x6}, 0x70) r2 = syz_open_dev$video(0x0, 0x200, 0x2000) r3 = eventfd(0xbd7b) io_submit(0x0, 0x6, &(0x7f0000000700)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x6, 0x7, r1, &(0x7f0000000200)="0cdeab6ec848ddf96b42488db1947bb8fe14669fedac45b83b6151c85f04718df487ecd33d2f2998fb084f599824001feb051a8587c4cef9c77d6d659985", 0x3e, 0x8000000000000000, 0x0, 0x1}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x7, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x65d5, 0x0, 0x0, r1}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x7, 0x1, 0xffffffffffffffff, &(0x7f0000000380)="6a2e746098935fb6527f3d62ed852e42a73d63d9c5929817b512fc96c0c5c249fc4bde4b354208895c86e690f32a0cf27e01850d6a68787794148d84fc685b4b7e71d5eee6e5aa2e2cde39b7ef8c2ca13c51148e717f28b4d280b956a0059a853c14d7c02b24d66d59ebf798bd0235898c467fed99038087ad5de90e1f144428278fa76c9acb52c2ac6a6d8a5b4d6f08449f7e19daf6b2ac30f525abaff332fb26739e3acaaba8e6286e133482c5a2055f736453ed7d7bff07982f9c43", 0xbd, 0x8, 0x0, 0x1}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x8, 0x4, r2, &(0x7f0000000540)="ee352ae1f741ebd616a1e1cd0335415269c56891a20482502a9d5744a7c1d463cc2fdee29565b6d8721b0786f1a847b4ebc7c7f78438a71660e012d235fa3cad92e18635d3ae05c5fc5e5dd4a1890619b55ed98f231e2ce23ae0b409b9fe8db53259c434e165f756d631896326c04b010f3ded346021c5069ea3e27bc1ce1b2f158e7b75ad531ba747ea5e58101945fba3cc8bcc441a0ebc04c5811a958b6f63a0a9771fb02e4dc1c2259c3a77e792b11fffa6c44e731033fea4", 0xba, 0xffffffff, 0x0, 0x3, r3}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000900)="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", 0xffc, 0x7, 0x0, 0x1, r0}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x8, 0x4, r0, &(0x7f0000001900)="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", 0x600, 0x9, 0x0, 0x2}]) 2.658215728s ago: executing program 1 (id=99): r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x7, 0x2, 0x1, "5ee9f7e6accae6951fc3796de8ecd392a635ea32360379ec280ffde5ef6765ba", 0x43564548}) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000002c0), 0x2441, 0x0) ioctl$SNDCTL_SEQ_THRESHOLD(r1, 0x4004510d, &(0x7f0000000400)=0xb8e7) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') lseek(r3, 0x1000000, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) init_module(&(0x7f0000000580)=ANY=[@ANYRES8=r3], 0x78, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_COLLECT_METADATA={0x4}, @IFLA_GENEVE_PORT={0x6, 0x5, 0x4e23}, @IFLA_GENEVE_TTL_INHERIT={0x5}]}}}]}, 0x48}}, 0x48000) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=@base={0x7, 0x9, 0x1, 0x0, 0x40, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0xc14f, 0x1}, 0x50) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000240)={0xb8b, 0x89, 0xa57, 0x9, 0x2, 0x4}) bind$nfc_llcp(r4, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x10000000000001}, 0x60) r5 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x10000, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x0) r7 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_control_io(r7, 0x0, &(0x7f0000000c40)={0x84, &(0x7f0000000780)=ANY=[@ANYBLOB='\x00\x00.'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.05821883s ago: executing program 3 (id=100): sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16, @ANYBLOB="05000000000000", @ANYRES32, @ANYBLOB="3d000e0080000000ffffffffffff080211000000ffffffffffff0000feffffffffffffff070001000406f0027f0006a7000c006400000008000d000000000073f68ac399765b7ab289a21d254ebf1c30920188d7e0527bff31151da7c57628327841e9134f4b1b378bcbf5a202"], 0x70}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c000078ac1414000a0101004414", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850", 0x4, 0xfffffffffffffffe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4800000010000504"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), 0x0, 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1.425194252s ago: executing program 2 (id=101): futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, 0x0, 0x0, 0x2) socket$inet6(0xa, 0x2, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000200)={0x1, 0x0, 0x2, 0x3, 0x5f, &(0x7f00000009c0)}) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x20000180) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r4 = syz_open_dev$media(&(0x7f0000000080), 0x10001, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r4, 0x80047c05, 0x0) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$usbfs(&(0x7f0000000140), 0x76, 0x101301) socket$xdp(0x2c, 0x3, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x300, 0xff, 0xfffffffffffff0af, 0xffffffffffffffff, 0x0, 0x10000, 0x103, 0x3}, 0x0, &(0x7f00000002c0)={0x3fe, 0xcd7f, 0x3, 0x7, 0x9, 0x45ff, 0xd68d, 0x40000000000}, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x80000800, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = syz_open_procfs(0x0, &(0x7f0000000840)='comm\x00') writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000140)='15', 0x2}], 0x8) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) timer_create(0x7, 0x0, &(0x7f0000001b40)=0x0) timer_settime(r6, 0x1, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) 1.362555654s ago: executing program 0 (id=102): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) r2 = getpid() setrlimit(0xb, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mlock2(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0) mlock2(&(0x7f0000a20000/0x1000)=nil, 0x1000, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r5 = add_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f0000000500)={'syz', 0x3}, &(0x7f0000000040)="42d7386debb9c100", 0x8, 0xfffffffffffffffe) keyctl$read(0xb, r5, 0x0, 0x0) r6 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e29, 0x6, @dev={0xfe, 0x80, '\x00', 0x2d}, 0xf}, 0x1c) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x1}}, 0x30) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, &(0x7f0000004180)={0x2020}, 0x2020) 1.259118245s ago: executing program 3 (id=103): socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x50) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) io_setup(0x6, &(0x7f00000000c0)=0x0) io_getevents(r0, 0x257, 0x1, &(0x7f0000000240)=[{}], 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="07000000040000001800000042a000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32, @ANYBLOB="0000f2ff17000000000000001b00d88137f76d5b3d00"/35], 0x48) io_submit(r0, 0x0, &(0x7f0000000280)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) r2 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPIOCGCHAN(r2, 0x80047437, 0x0) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000020000000000006bb55a2a630bf7c045f94cd977", 0x18, 0xffffffffffffffff) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port1\x00', 0x72, 0x11cfa, 0x0, 0x8000007, 0x3, 0x4, 0x1, 0x0, 0x5}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x40505330, &(0x7f00000001c0)={0x800100, 0xffffffff, 0x22, 0xe1d9, 0x1101, 0xff}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x40505330, &(0x7f0000000140)={0x800100, 0xffffffff, 0x2, 0xe1db, 0x1101, 0xff}) close(r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)={0x3c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@cf_end_cf_ack={{}, {0xa}, @device_a, @device_b}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x44800) 0s ago: executing program 0 (id=104): socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x50) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) io_setup(0x6, &(0x7f00000000c0)=0x0) io_getevents(r0, 0x257, 0x1, &(0x7f0000000240)=[{}], 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="07000000040000001800000042a000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB="0000f2ff17000000000000001b00d88137f76d5b3d00"/35], 0x48) io_submit(r0, 0x0, &(0x7f0000000280)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) r2 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPIOCGCHAN(r2, 0x80047437, 0x0) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000020000000000006bb55a2a630bf7c045f94cd977", 0x18, 0xffffffffffffffff) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port1\x00', 0x72, 0x11cfa, 0x0, 0x8000007, 0x3, 0x4, 0x1, 0x0, 0x5}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x40505330, &(0x7f00000001c0)={0x800100, 0xffffffff, 0x22, 0xe1d9, 0x1101, 0xff}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x40505330, &(0x7f0000000140)={0x800100, 0xffffffff, 0x2, 0xe1db, 0x1101, 0xff}) close(r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)={0x3c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@cf_end_cf_ack={{}, {0xa}, @device_a, @device_b}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x44800) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.73' (ED25519) to the list of known hosts. [ 73.273082][ T5780] cgroup: Unknown subsys name 'net' [ 73.434944][ T5780] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 75.071860][ T5780] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 77.303560][ T5801] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 77.312146][ T5804] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 77.331864][ T5802] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 77.343855][ T5802] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 77.352297][ T5802] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 77.354245][ T5801] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 77.360519][ T5802] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 77.368595][ T5801] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 77.374958][ T5802] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 77.381467][ T5801] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 77.387699][ T5804] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 77.403771][ T5801] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 77.404116][ T5804] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 77.412659][ T5801] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 77.425311][ T5804] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 77.426491][ T5801] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 77.433543][ T5804] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 77.440616][ T5801] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 77.446923][ T5804] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 77.453898][ T5801] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 77.460938][ T5804] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 77.478041][ T5804] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 77.489308][ T5796] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 77.496899][ T5796] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 77.958907][ T5792] chnl_net:caif_netlink_parms(): no params data found [ 77.992370][ T5789] chnl_net:caif_netlink_parms(): no params data found [ 78.062904][ T5790] chnl_net:caif_netlink_parms(): no params data found [ 78.184215][ T5792] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.192189][ T5792] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.200280][ T5792] bridge_slave_0: entered allmulticast mode [ 78.207198][ T5792] bridge_slave_0: entered promiscuous mode [ 78.241896][ T5792] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.249808][ T5792] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.256950][ T5792] bridge_slave_1: entered allmulticast mode [ 78.263999][ T5792] bridge_slave_1: entered promiscuous mode [ 78.305430][ T5791] chnl_net:caif_netlink_parms(): no params data found [ 78.338084][ T5792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.348102][ T5789] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.355576][ T5789] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.363646][ T5789] bridge_slave_0: entered allmulticast mode [ 78.371441][ T5789] bridge_slave_0: entered promiscuous mode [ 78.385081][ T5789] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.392447][ T5789] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.399663][ T5789] bridge_slave_1: entered allmulticast mode [ 78.406426][ T5789] bridge_slave_1: entered promiscuous mode [ 78.439722][ T5792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.479599][ T5790] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.486789][ T5790] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.494333][ T5790] bridge_slave_0: entered allmulticast mode [ 78.501156][ T5790] bridge_slave_0: entered promiscuous mode [ 78.509940][ T5790] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.517108][ T5790] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.524367][ T5790] bridge_slave_1: entered allmulticast mode [ 78.531381][ T5790] bridge_slave_1: entered promiscuous mode [ 78.605324][ T5792] team0: Port device team_slave_0 added [ 78.618465][ T5789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.632470][ T5789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.644085][ T5790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.655381][ T5792] team0: Port device team_slave_1 added [ 78.692328][ T5790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.747846][ T5789] team0: Port device team_slave_0 added [ 78.766430][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.773726][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.800983][ T5792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.813571][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.820800][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.847012][ T5792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.869972][ T5789] team0: Port device team_slave_1 added [ 78.878609][ T5790] team0: Port device team_slave_0 added [ 78.894623][ T5791] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.901841][ T5791] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.909335][ T5791] bridge_slave_0: entered allmulticast mode [ 78.916186][ T5791] bridge_slave_0: entered promiscuous mode [ 78.939131][ T5790] team0: Port device team_slave_1 added [ 78.986947][ T5791] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.994538][ T5791] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.001816][ T5791] bridge_slave_1: entered allmulticast mode [ 79.009623][ T5791] bridge_slave_1: entered promiscuous mode [ 79.042294][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.049705][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.075967][ T5789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.089699][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.096794][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.122882][ T5789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.140560][ T5792] hsr_slave_0: entered promiscuous mode [ 79.149538][ T5792] hsr_slave_1: entered promiscuous mode [ 79.167613][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.174586][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.200829][ T5790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.217953][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.224928][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.251098][ T5790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.286311][ T5791] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.355098][ T5791] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.397928][ T5790] hsr_slave_0: entered promiscuous mode [ 79.404270][ T5790] hsr_slave_1: entered promiscuous mode [ 79.410523][ T5790] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.418663][ T5790] Cannot create hsr debugfs directory [ 79.428739][ T5789] hsr_slave_0: entered promiscuous mode [ 79.435021][ T5789] hsr_slave_1: entered promiscuous mode [ 79.441213][ T5789] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.449233][ T5789] Cannot create hsr debugfs directory [ 79.504332][ T5791] team0: Port device team_slave_0 added [ 79.528871][ T5807] Bluetooth: hci1: command tx timeout [ 79.532508][ T5796] Bluetooth: hci2: command tx timeout [ 79.534639][ T5794] Bluetooth: hci3: command tx timeout [ 79.540361][ T5806] Bluetooth: hci0: command tx timeout [ 79.566873][ T5791] team0: Port device team_slave_1 added [ 79.656446][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.663483][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.690853][ T5791] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.728795][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.735778][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.762181][ T5791] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.870744][ T5791] hsr_slave_0: entered promiscuous mode [ 79.877138][ T5791] hsr_slave_1: entered promiscuous mode [ 79.883318][ T5791] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.891301][ T5791] Cannot create hsr debugfs directory [ 80.049376][ T5792] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 80.063680][ T5792] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 80.073274][ T5792] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 80.096209][ T5792] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 80.209327][ T5790] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 80.226984][ T5790] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 80.245945][ T5790] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 80.269994][ T5790] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 80.333499][ T5789] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 80.343674][ T5789] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 80.361009][ T5789] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 80.373392][ T5789] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 80.456572][ T5791] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 80.466449][ T5791] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 80.488638][ T5791] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 80.501089][ T5791] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 80.565723][ T5792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.645114][ T5792] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.672151][ T2911] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.679608][ T2911] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.699016][ T5790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.715095][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.722273][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.773488][ T5790] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.796400][ T5789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.819249][ T2911] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.826448][ T2911] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.853356][ T2911] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.860565][ T2911] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.916455][ T5791] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.936205][ T5789] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.965812][ T5791] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.995984][ T2896] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.003191][ T2896] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.013161][ T2896] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.020385][ T2896] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.061591][ T2896] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.068786][ T2896] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.083275][ T2896] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.090515][ T2896] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.446890][ T5792] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.613832][ T5806] Bluetooth: hci1: command tx timeout [ 81.613915][ T5807] Bluetooth: hci3: command tx timeout [ 81.623882][ T5806] Bluetooth: hci0: command tx timeout [ 81.626500][ T5794] Bluetooth: hci2: command tx timeout [ 81.652168][ T5792] veth0_vlan: entered promiscuous mode [ 81.691958][ T5792] veth1_vlan: entered promiscuous mode [ 81.712036][ T5790] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.764798][ T5791] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.805027][ T5792] veth0_macvtap: entered promiscuous mode [ 81.820683][ T5789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.846450][ T5792] veth1_macvtap: entered promiscuous mode [ 81.911339][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.950852][ T5790] veth0_vlan: entered promiscuous mode [ 81.963255][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.011814][ T5792] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.025148][ T5792] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.034428][ T5792] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.043363][ T5792] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.058642][ T5791] veth0_vlan: entered promiscuous mode [ 82.075824][ T5790] veth1_vlan: entered promiscuous mode [ 82.098837][ T5789] veth0_vlan: entered promiscuous mode [ 82.123747][ T5791] veth1_vlan: entered promiscuous mode [ 82.161523][ T5789] veth1_vlan: entered promiscuous mode [ 82.292653][ T5790] veth0_macvtap: entered promiscuous mode [ 82.318354][ T5790] veth1_macvtap: entered promiscuous mode [ 82.339246][ T5791] veth0_macvtap: entered promiscuous mode [ 82.384311][ T5791] veth1_macvtap: entered promiscuous mode [ 82.434755][ T5789] veth0_macvtap: entered promiscuous mode [ 82.450446][ T138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.455089][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.480091][ T138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.481569][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.501929][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.525947][ T5789] veth1_macvtap: entered promiscuous mode [ 82.546144][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.563880][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.585957][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.614822][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.634592][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.652042][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.663383][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.678614][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.705190][ T5790] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.717922][ T5790] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.726670][ T5790] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.736345][ T5790] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.763695][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.781141][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.791831][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.802724][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.815228][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.826722][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.850098][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.873145][ T5791] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.886781][ T5791] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.896002][ T5791] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.904937][ T5791] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.935715][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.946481][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.956600][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.971347][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.981501][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.992147][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.004377][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.039579][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.053436][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.063905][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.074738][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.084623][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.095092][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.106902][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.156897][ T5789] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.177051][ T5789] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.187064][ T5789] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.202634][ T5789] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.297075][ T138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.357496][ T138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.641149][ T138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.692482][ T5794] Bluetooth: hci0: command tx timeout [ 83.698379][ T5794] Bluetooth: hci2: command tx timeout [ 83.701026][ T5806] Bluetooth: hci3: command tx timeout [ 83.709527][ T5807] Bluetooth: hci1: command tx timeout [ 83.725110][ T138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.021504][ T2911] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.036029][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.047801][ T2911] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.058102][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.120548][ T5885] input: syz0 as /devices/virtual/input/input5 [ 84.223714][ T2911] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.286128][ T2911] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.728848][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 85.608405][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 85.617369][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 85.692208][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 85.918699][ T5908] Invalid ELF header magic: != ELF [ 86.187727][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 86.666566][ T5916] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6'. [ 87.054237][ T9] cfg80211: failed to load regulatory.db [ 87.093137][ T23] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 87.111932][ T5924] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 87.259400][ T23] usb 2-1: device descriptor read/64, error -71 [ 87.558180][ T23] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 87.587470][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 87.711766][ T2911] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.753763][ T23] usb 2-1: device descriptor read/64, error -71 [ 87.893419][ T23] usb usb2-port1: attempt power cycle [ 87.978076][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 88.008894][ T2911] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.201854][ T2911] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.320402][ T2911] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.339429][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 88.968313][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 90.467659][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 91.023613][ T5807] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 91.036242][ T5807] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 91.063411][ T5807] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 91.072025][ T5807] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 91.081863][ T5807] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 91.090043][ T5807] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 91.116862][ T5806] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 91.141124][ T5806] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 91.148559][ T5806] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 91.157925][ T5806] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 91.165952][ T5806] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 91.176694][ T5806] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 91.686290][ T5974] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 93.217705][ T5806] Bluetooth: hci0: command tx timeout [ 94.070044][ T5964] chnl_net:caif_netlink_parms(): no params data found [ 94.725182][ T5964] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.271626][ T5964] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.293633][ T5806] Bluetooth: hci0: command tx timeout [ 95.489714][ T5964] bridge_slave_0: entered allmulticast mode [ 95.513424][ T5964] bridge_slave_0: entered promiscuous mode [ 96.154407][ T5964] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.191358][ T5964] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.303343][ T5964] bridge_slave_1: entered allmulticast mode [ 96.323916][ T6002] syz.0.16[6002]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 96.471423][ T5964] bridge_slave_1: entered promiscuous mode [ 97.028623][ T5964] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.228229][ T2911] hsr_slave_0: left promiscuous mode [ 97.367517][ T5806] Bluetooth: hci0: command tx timeout [ 97.552822][ T2911] hsr_slave_1: left promiscuous mode [ 97.665009][ T2911] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 97.674052][ T2911] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 97.702374][ T2911] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 97.713208][ T2911] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 97.728198][ T2911] bridge_slave_1: left allmulticast mode [ 97.736472][ T2911] bridge_slave_1: left promiscuous mode [ 97.748322][ T2911] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.792163][ T2911] bridge_slave_0: left allmulticast mode [ 97.803987][ T2911] bridge_slave_0: left promiscuous mode [ 97.827691][ T2911] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.153986][ T2911] veth1_macvtap: left promiscuous mode [ 98.213412][ T2911] veth0_macvtap: left promiscuous mode [ 98.320751][ T2911] veth1_vlan: left promiscuous mode [ 98.405323][ T2911] veth0_vlan: left promiscuous mode [ 99.639179][ T5806] Bluetooth: hci0: command tx timeout [ 101.717656][ T6039] Bluetooth: MGMT ver 1.22 [ 103.460769][ T2911] team0 (unregistering): Port device team_slave_1 removed [ 103.510900][ T2911] team0 (unregistering): Port device team_slave_0 removed [ 103.569466][ T2911] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 103.616384][ T2911] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 104.136642][ T2911] bond0 (unregistering): Released all slaves [ 104.272383][ T5964] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.365731][ T6048] netlink: 8 bytes leftover after parsing attributes in process `syz.1.24'. [ 104.618941][ T5964] team0: Port device team_slave_0 added [ 104.829998][ T5964] team0: Port device team_slave_1 added [ 105.413439][ T5964] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.645974][ T5964] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.672039][ C1] vkms_vblank_simulate: vblank timer overrun [ 105.679049][ T5964] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.767181][ T5964] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.793916][ T5964] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.821136][ T5964] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 106.952584][ T5964] hsr_slave_0: entered promiscuous mode [ 106.982978][ T5964] hsr_slave_1: entered promiscuous mode [ 107.006851][ T5964] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 107.023019][ T5964] Cannot create hsr debugfs directory [ 108.622188][ T6096] netlink: 40 bytes leftover after parsing attributes in process `syz.1.31'. [ 109.491323][ T5964] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 109.514610][ T5964] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 109.557934][ T5964] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 109.586776][ T5964] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 109.666635][ T5860] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 110.484709][ T5964] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.611710][ T5964] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.627750][ T5860] usb 1-1: Using ep0 maxpacket: 16 [ 110.651410][ T5860] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 110.671436][ T5860] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 110.683249][ T2911] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.690436][ T2911] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.698266][ T5860] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.706434][ T5860] usb 1-1: Product: syz [ 110.711224][ T5860] usb 1-1: Manufacturer: syz [ 110.715966][ T5860] usb 1-1: SerialNumber: syz [ 110.793125][ T2911] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.794521][ T5860] usb 1-1: config 0 descriptor?? [ 110.800369][ T2911] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.906044][ T5860] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 110.940055][ T5860] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 111.666818][ T5860] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 112.304047][ T5860] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 112.333941][ T5860] em28xx 1-1:0.0: board has no eeprom [ 112.844443][ T5964] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 113.024696][ T5860] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 114.755638][ T5860] em28xx 1-1:0.0: dvb set to bulk mode. [ 114.762660][ T6102] em28xx 1-1:0.0: reading from i2c device at 0x0 failed (error=-5) [ 114.764178][ T23] em28xx 1-1:0.0: Binding DVB extension [ 114.875638][ T5964] veth0_vlan: entered promiscuous mode [ 114.892457][ T5964] veth1_vlan: entered promiscuous mode [ 115.028033][ T23] em28xx 1-1:0.0: Registering input extension [ 115.053885][ T5840] usb 1-1: USB disconnect, device number 2 [ 115.070459][ T5840] em28xx 1-1:0.0: Disconnecting em28xx [ 115.076106][ T5840] em28xx 1-1:0.0: Closing input extension [ 115.141986][ T5840] em28xx 1-1:0.0: Freeing device [ 115.166828][ T5964] veth0_macvtap: entered promiscuous mode [ 115.235179][ T5964] veth1_macvtap: entered promiscuous mode [ 115.372183][ T5964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.384798][ T5964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.395398][ T5964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.406252][ T5964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.416579][ T5964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 115.427561][ T5964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.440469][ T5964] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.461147][ T5964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.480105][ T5964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.493857][ T5964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.506195][ T5964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.518480][ T5964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 115.534198][ T5964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 115.559462][ T5964] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.574454][ T5964] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.591567][ T5964] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.673725][ T5964] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.682833][ T5964] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.098735][ T6165] netlink: 8 bytes leftover after parsing attributes in process `syz.1.40'. [ 116.336336][ T2896] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.393404][ T2896] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.769364][ T6165] netlink: 8 bytes leftover after parsing attributes in process `syz.1.40'. [ 116.936258][ T6165] netlink: 8 bytes leftover after parsing attributes in process `syz.1.40'. [ 117.009448][ T6165] netlink: 8 bytes leftover after parsing attributes in process `syz.1.40'. [ 117.070951][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.115929][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.360631][ T6163] netlink: 40 bytes leftover after parsing attributes in process `syz.1.40'. [ 118.023223][ T6181] Invalid ELF header magic: != ELF [ 119.276731][ T6191] netlink: 8 bytes leftover after parsing attributes in process `syz.2.44'. [ 119.329229][ T6191] netlink: 8 bytes leftover after parsing attributes in process `syz.2.44'. [ 119.340652][ T6191] netlink: 8 bytes leftover after parsing attributes in process `syz.2.44'. [ 119.351601][ T6191] netlink: 8 bytes leftover after parsing attributes in process `syz.2.44'. [ 119.952647][ T6190] netlink: 40 bytes leftover after parsing attributes in process `syz.2.44'. [ 120.117772][ T5888] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 121.208964][ T5888] usb 1-1: device descriptor read/64, error -71 [ 121.307431][ T23] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 121.507766][ T5888] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 121.507830][ T23] usb 2-1: Using ep0 maxpacket: 16 [ 121.553709][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 121.724163][ T23] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 121.747496][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.795316][ T23] usb 2-1: Product: syz [ 121.804645][ T23] usb 2-1: Manufacturer: syz [ 121.823320][ T23] usb 2-1: SerialNumber: syz [ 121.888863][ T23] usb 2-1: config 0 descriptor?? [ 124.213437][ T23] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 124.827432][ T23] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 124.907804][ T23] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 125.895495][ T23] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 125.914529][ T23] em28xx 2-1:0.0: board has no eeprom [ 125.997640][ T23] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 126.005568][ T23] em28xx 2-1:0.0: dvb set to bulk mode. [ 126.027435][ T5888] em28xx 2-1:0.0: Binding DVB extension [ 126.054509][ T23] usb 2-1: USB disconnect, device number 5 [ 126.068400][ T23] em28xx 2-1:0.0: Disconnecting em28xx [ 126.086852][ T5888] em28xx 2-1:0.0: Registering input extension [ 126.094245][ T23] em28xx 2-1:0.0: Closing input extension [ 126.110479][ T23] em28xx 2-1:0.0: Freeing device [ 126.667393][ T6243] netlink: 8 bytes leftover after parsing attributes in process `syz.0.53'. [ 126.874761][ T6245] netlink: 8 bytes leftover after parsing attributes in process `syz.0.53'. [ 126.899845][ T6245] netlink: 8 bytes leftover after parsing attributes in process `syz.0.53'. [ 126.920750][ T6245] netlink: 8 bytes leftover after parsing attributes in process `syz.0.53'. [ 127.199250][ T6243] netlink: 40 bytes leftover after parsing attributes in process `syz.0.53'. [ 127.397624][ T6229] netlink: 4 bytes leftover after parsing attributes in process `syz.1.52'. [ 128.983184][ T6261] Invalid ELF header magic: != ELF [ 129.507561][ T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 129.909924][ T9] usb 1-1: device descriptor read/64, error -71 [ 130.511106][ T9] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 130.733813][ T6273] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 132.119243][ T5807] Bluetooth: hci4: sending frame failed (-49) [ 132.127535][ T5806] Bluetooth: hci4: Opcode 0x1003 failed: -49 [ 133.252821][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.347913][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 136.833861][ T6293] netlink: 8 bytes leftover after parsing attributes in process `syz.2.67'. [ 137.496970][ T6293] netlink: 40 bytes leftover after parsing attributes in process `syz.2.67'. [ 137.594024][ T6302] netlink: 8 bytes leftover after parsing attributes in process `syz.1.70'. [ 137.665485][ T6302] netlink: 8 bytes leftover after parsing attributes in process `syz.1.70'. [ 137.676531][ T6302] netlink: 8 bytes leftover after parsing attributes in process `syz.1.70'. [ 137.686799][ T6302] netlink: 8 bytes leftover after parsing attributes in process `syz.1.70'. [ 137.970362][ T6302] netlink: 40 bytes leftover after parsing attributes in process `syz.1.70'. [ 139.129128][ T6311] Invalid ELF header magic: != ELF [ 139.727367][ T8] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 139.917511][ T8] usb 2-1: device descriptor read/64, error -71 [ 140.190733][ T8] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 140.451240][ T8] usb 2-1: device descriptor read/64, error -71 [ 141.077677][ T8] usb usb2-port1: attempt power cycle [ 141.577685][ T8] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 141.898184][ T8] usb 2-1: device descriptor read/8, error -71 [ 145.066571][ T6359] sock: sock_timestamping_bind_phc: sock not bind to device [ 146.773167][ T6364] netlink: 8 bytes leftover after parsing attributes in process `syz.2.88'. [ 146.877880][ T6364] netlink: 8 bytes leftover after parsing attributes in process `syz.2.88'. [ 146.889749][ T6364] netlink: 8 bytes leftover after parsing attributes in process `syz.2.88'. [ 146.900536][ T6364] netlink: 8 bytes leftover after parsing attributes in process `syz.2.88'. [ 147.170110][ T6364] netlink: 40 bytes leftover after parsing attributes in process `syz.2.88'. [ 147.300342][ T6370] netlink: 8 bytes leftover after parsing attributes in process `syz.3.90'. [ 147.313492][ T6370] netlink: 8 bytes leftover after parsing attributes in process `syz.3.90'. [ 147.443176][ T6370] netlink: 8 bytes leftover after parsing attributes in process `syz.3.90'. [ 147.480109][ T6370] netlink: 8 bytes leftover after parsing attributes in process `syz.3.90'. [ 147.601013][ T6370] netlink: 40 bytes leftover after parsing attributes in process `syz.3.90'. [ 151.107839][ T6400] Invalid ELF header magic: != ELF [ 151.757425][ T9] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 151.917510][ T9] usb 2-1: device descriptor read/64, error -71 [ 217.128757][ T5807] Bluetooth: hci0: command 0x0406 tx timeout [ 261.447177][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 261.454261][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P2963/1:b..l [ 261.462468][ C0] rcu: (detected by 0, t=10502 jiffies, g=14637, q=316 ncpus=2) [ 261.470181][ C0] task:kworker/u4:11 state:R running task stack:22728 pid:2963 ppid:2 flags:0x00004000 [ 261.481527][ C0] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet [ 261.489355][ C0] Call Trace: [ 261.492634][ C0] [ 261.495563][ C0] __schedule+0x14d2/0x44d0 [ 261.500078][ C0] ? mark_lock+0x50/0x320 [ 261.504412][ C0] ? asan.module_dtor+0x20/0x20 [ 261.509278][ C0] ? mark_lock+0x94/0x320 [ 261.513624][ C0] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 261.519606][ C0] ? preempt_schedule_irq+0xaa/0x140 [ 261.524893][ C0] preempt_schedule_irq+0xb5/0x140 [ 261.530028][ C0] ? preempt_schedule_notrace+0x110/0x110 [ 261.535743][ C0] ? mark_lock+0x94/0x320 [ 261.540070][ C0] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 261.545872][ C0] irqentry_exit+0x67/0x70 [ 261.550290][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 261.556270][ C0] RIP: 0010:lock_acquire+0x1f2/0x410 [ 261.561557][ C0] Code: 00 9c 8f 84 24 80 00 00 00 f6 84 24 81 00 00 00 02 0f 85 f5 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 04 3c 00 00 00 00 66 43 c7 44 3c 09 00 00 43 c6 44 3c 0b 00 [ 261.581163][ C0] RSP: 0018:ffffc9000be978a0 EFLAGS: 00000206 [ 261.587237][ C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: ab90e42df4796500 [ 261.595241][ C0] RDX: 0000000000000000 RSI: ffffffff8aaace20 RDI: ffffffff8afc71c0 [ 261.603231][ C0] RBP: ffffc9000be979a8 R08: dffffc0000000000 R09: 1ffffffff21b4ea0 [ 261.611217][ C0] R10: dffffc0000000000 R11: fffffbfff21b4ea1 R12: 1ffff920017d2f20 [ 261.619212][ C0] R13: ffffffff8cd2fe20 R14: 0000000000000246 R15: dffffc0000000000 [ 261.627220][ C0] ? batadv_iv_ogm_schedule+0x3f3/0xe90 [ 261.632777][ C0] ? read_lock_is_recursive+0x20/0x20 [ 261.638148][ C0] ? batadv_tvlv_container_ogm_append+0x463/0x4e0 [ 261.644575][ C0] ? batadv_tvlv_container_ogm_append+0x463/0x4e0 [ 261.650990][ C0] batadv_iv_ogm_schedule+0x417/0xe90 [ 261.656359][ C0] ? batadv_iv_ogm_schedule+0x3f3/0xe90 [ 261.661925][ C0] ? batadv_iv_ogm_schedule+0x3f3/0xe90 [ 261.667472][ C0] ? batadv_iv_send_outstanding_bat_ogm_packet+0x840/0x840 [ 261.674679][ C0] batadv_iv_send_outstanding_bat_ogm_packet+0x731/0x840 [ 261.681705][ C0] ? process_scheduled_works+0x957/0x15b0 [ 261.687421][ C0] process_scheduled_works+0xa45/0x15b0 [ 261.692975][ C0] ? assign_work+0x400/0x400 [ 261.697568][ C0] ? assign_work+0x39e/0x400 [ 261.702155][ C0] worker_thread+0xa55/0xfc0 [ 261.706751][ C0] kthread+0x2fa/0x390 [ 261.710833][ C0] ? pr_cont_work+0x560/0x560 [ 261.715509][ C0] ? kthread_blkcg+0xd0/0xd0 [ 261.720094][ C0] ret_from_fork+0x48/0x80 [ 261.724614][ C0] ? kthread_blkcg+0xd0/0xd0 [ 261.729198][ C0] ret_from_fork_asm+0x11/0x20 [ 261.733978][ C0] [ 261.736996][ C0] rcu: rcu_preempt kthread starved for 9989 jiffies! g14637 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 261.748099][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 261.758058][ C0] rcu: RCU grace-period kthread stack dump: [ 261.763932][ C0] task:rcu_preempt state:R running task stack:27272 pid:17 ppid:2 flags:0x00004000 [ 261.774704][ C0] Call Trace: [ 261.777992][ C0] [ 261.780933][ C0] __schedule+0x14d2/0x44d0 [ 261.785459][ C0] ? asan.module_dtor+0x20/0x20 [ 261.790325][ C0] ? enqueue_timer+0x225/0x530 [ 261.795087][ C0] ? __mod_timer+0x984/0xdb0 [ 261.799706][ C0] schedule+0xbd/0x170 [ 261.803799][ C0] schedule_timeout+0x160/0x280 [ 261.808689][ C0] ? console_conditional_schedule+0x40/0x40 [ 261.814585][ C0] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 261.820498][ C0] ? update_process_times+0x1b0/0x1b0 [ 261.825874][ C0] ? prepare_to_swait_event+0x339/0x360 [ 261.831423][ C0] rcu_gp_fqs_loop+0x302/0x1560 [ 261.836283][ C0] ? rcu_gp_init+0x110e/0x1510 [ 261.841051][ C0] ? dyntick_save_progress_counter+0x2b0/0x2b0 [ 261.847216][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 261.852433][ C0] ? rcu_gp_init+0x1510/0x1510 [ 261.857220][ C0] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 261.863111][ C0] ? finish_swait+0xc7/0x1d0 [ 261.867717][ C0] rcu_gp_kthread+0x99/0x380 [ 261.872313][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 261.877433][ C0] ? __kthread_parkme+0x7a/0x1c0 [ 261.882385][ C0] ? __kthread_parkme+0x162/0x1c0 [ 261.887512][ C0] kthread+0x2fa/0x390 [ 261.891576][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 261.896704][ C0] ? kthread_blkcg+0xd0/0xd0 [ 261.901289][ C0] ret_from_fork+0x48/0x80 [ 261.905711][ C0] ? kthread_blkcg+0xd0/0xd0 [ 261.910296][ C0] ret_from_fork_asm+0x11/0x20 [ 261.915065][ C0] [ 261.918082][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 261.924416][ C0] Sending NMI from CPU 0 to CPUs 1: [ 261.929629][ C1] NMI backtrace for cpu 1 [ 261.929639][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 [ 261.929653][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 261.929660][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 261.929684][ C1] Code: cc cc cc cc cc cc cc f3 0f 1e fa 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 66 90 0f 00 2d a3 e8 39 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 66 0f 1f 00 55 41 57 41 56 [ 261.929696][ C1] RSP: 0018:ffffc90000187de0 EFLAGS: 000002c2 [ 261.929710][ C1] RAX: 369b328d2f655a00 RBX: ffffffff8161925b RCX: 369b328d2f655a00 [ 261.929721][ C1] RDX: 0000000000000001 RSI: ffffffff8aaabca0 RDI: ffffffff8afc71c0 [ 261.929732][ C1] RBP: ffffc90000187f20 R08: ffff8880b8f36b2b R09: 1ffff110171e6d65 [ 261.929742][ C1] R10: dffffc0000000000 R11: ffffed10171e6d66 R12: ffffffff8e4a91a8 [ 261.929752][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff1100364e780 [ 261.929762][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 261.929774][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 261.929785][ C1] CR2: 000055d8108a5a38 CR3: 000000002ebd1000 CR4: 00000000003506e0 [ 261.929800][ C1] Call Trace: [ 261.929805][ C1] [ 261.929810][ C1] default_idle+0x13/0x20 [ 261.929822][ C1] default_idle_call+0x6c/0xa0 [ 261.929835][ C1] do_idle+0x1eb/0x510 [ 261.929854][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 261.929869][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 261.929889][ C1] ? asm_sysvec_call_function_single+0x1a/0x20 [ 261.929910][ C1] cpu_startup_entry+0x43/0x60 [ 261.929926][ C1] start_secondary+0xee/0xf0 [ 261.929941][ C1] secondary_startup_64_no_verify+0x179/0x17b [ 261.929966][ C1]