last executing test programs: 36.331822496s ago: executing program 3 (id=9): mount$fuse(0x0, 0x0, 0x0, 0x20080, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYRESOCT, @ANYRESDEC=0x0]) r0 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000c4b20710200e01015a1f9702030109021b00010000000009040000012e6d0a150905ff27"], 0x0) syz_usb_ep_read(r0, 0x4, 0x99, &(0x7f0000000100)=""/153) 36.058360151s ago: executing program 4 (id=5): r0 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000002d40)={0x2020}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sched_setscheduler(0x0, 0x1, &(0x7f0000000640)=0x7) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x536, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = syz_open_procfs$namespace(0x0, 0x0) clock_gettime(0x0, &(0x7f00000000c0)) ioctl$BTRFS_IOC_RM_DEV(r6, 0x5000940b, 0x0) mkdirat(r0, &(0x7f00000001c0)='./file2\x00', 0x127) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') setxattr$system_posix_acl(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000180)={{}, {0x1, 0x1}, [], {0x4, 0x3}, [], {0x10, 0x2}}, 0x24, 0x3) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000040)=0x100) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r7) 35.971019513s ago: executing program 1 (id=10): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000002880)=@raw={'raw\x00', 0x8, 0x3, 0x5a8, 0x0, 0xffffffff, 0xffffffff, 0x240, 0xffffffff, 0x4d8, 0xffffffff, 0xffffffff, 0x4d8, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1f8, 0x240, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@hashlimit2={{0x150}, {'\x00', {0x543, 0x100000000, 0x24, 0x10001, 0x6, 0x4, 0x0, 0xa0, 0x78}, {0x2}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@remote, 'bridge_slave_0\x00', {0x7f}}}}, {{@ipv6={@local, @remote, [0xaf0f9b1c7d504eaa, 0x0, 0xff000000, 0xffffff00], [0x0, 0xffffffff, 0xffffff00, 0xffffffff], 'sit0\x00', 'veth0_virt_wifi\x00', {}, {0xff}, 0x39, 0x3, 0x7}, 0x0, 0x230, 0x298, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x1, 0x1, 0xfd, 'syz1\x00'}}, @common=@srh1={{0x90}, {0x33, 0x8, 0x5, 0x80, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, [0x0, 0xff, 0xff, 0xffffffff], [0x0, 0xffffffff, 0xff000000, 0xff], [0xff, 0xffffff00, 0xffffff00, 0xff], 0x2, 0x110}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x9, 0x6, 0x4, '\x00', 'syz0\x00', {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x608) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8000000000000000}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) (async, rerun: 32) sendto$inet6(r1, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @dev={0xfe, 0x80, '\x00', 0x43}}, 0x1c) (async, rerun: 32) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async, rerun: 64) r2 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) (rerun: 64) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x98f90d, 0x9, '\x00', @p_u8=&(0x7f0000000040)}}) (async, rerun: 32) ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, 0x0) (async, rerun: 32) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='veno\x00', 0x5) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r4 = socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 32) bind$alg(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00'}) (async) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001b00)=@newtfilter={0x8c0, 0x2c, 0x2, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xfff3}, {0x5, 0x5}, {0xfff1, 0x2}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x7fff}, @filter_kind_options=@f_bpf={{0x8}, {0x86c, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x3}, @TCA_BPF_ACT={0x40c, 0x1, [@m_bpf={0x88, 0x17, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8, 0x5, r0}]}, {0x58, 0x6, "f296740be9f5fe463b2907f48787d98bfbe207faf630715567e2d73e82fa16b2b047004b9f7c45979ae5c0f08b28c1f0adc675e0f4d785f131f5dbc28e5fec4d2c1ee86afaeeefa3d617be12280e4f96ee504f0d"}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_simple={0x12c, 0x1c, 0x0, 0x0, {{0xb}, {0x6c, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x9, 0x3, 'syz0\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0xe68, 0x2, 0x1, 0x9, 0x9}}, @TCA_DEF_PARMS={0x18, 0x2, {0x5, 0xa3d, 0x357b758dc37b3977, 0x4, 0xdf}}, @TCA_DEF_PARMS={0x18, 0x2, {0x6, 0x9, 0xffffffffffffffff, 0x5, 0x7fffffff}}, @TCA_DEF_DATA={0x13, 0x3, 'bridge_slave_0\x00'}]}, {0x96, 0x6, "ff12dc66911d468ed01e8b030cdb7a80777b9b6cea84b328d3cedb0615ff57c9c9c08ca6a6d4c8c5cca4163b53b341eca9929febc7596a4d707f40e6e965fa8027b8c899fcde213ad4e7dc02d6bbbdbd41ccab3abbf1689e049a41b7b7130071a569a09b1b4b25256f1f11ea17bb4b25f9dc90298e79eac1acf2c001c6e11594aa5f9c27f099fa300760939c80349e24571c"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ctinfo={0xb0, 0x17, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x7, 0x5, 0x20000000, 0x7f, 0x6}}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x6}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x4}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x104}]}, {0x4c, 0x6, "8291e91c59116b3672b947efa9870ccd495f639fc84c1006c4e5f5eb5d9f3a7b1f9698cc80d91e9909e5113cd2c829abbd0f0b5bb616e65f7645169d6df6c7e5b58581a9d756e204"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x4, 0xded457f91867dc5c}}}}, @m_ctinfo={0x110, 0xf, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0xfb7}]}, {0xda, 0x6, "46b3de567b2daaa7bf3424d3bab5c49a8016f5a913770dd868326cf4ae6c057f6198f82849da18ccaf647a6c51c3cb9a80909686b400de3d0e530019ae33ecf72c00fa9343446ab1b6cb2cab4a09803ae1a9e0ed8c70733d0a28b6aa69c2d5fd38e108293e20fc06caa482e537036e631a7bf9c110aeb8eccefef758075c856f031ae4387367b182126d05a3cfd27bc2cb68759fa3acf5a0e7fe6fbb0a88eac74aa183e33f5fd4dd944c860fd2ab6e26e57b97dfc14c6f92aa01e688674d63ba9666ef1843c99bd81d761ab69c7ef24e0abb2ce0c6be"}, {0xc, 0x7, {0x45fbcd4294dc0dce}}, {0xc, 0x8, {0x1, 0x4}}}}, @m_vlan={0x94, 0xc, 0x0, 0x0, {{0x9}, {0x4c, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xd12}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xf05}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x8, 0x5, 0x8, 0x80000001, 0xe82}, 0x2}}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0xc20, 0xe2, 0x1, 0xfffffffe}, 0x3}}]}, {0x1d, 0x6, "a820aa1e4bb78506d5ecc20572d4b94f5dde04a9d9e5155b2a"}, {0xc}, {0xc, 0x8, {0x0, 0x6}}}}]}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x4}, @TCA_BPF_POLICE={0x44c, 0x2, [@TCA_POLICE_RATE64={0xc, 0x8, 0xffffffffffffe98d}, @TCA_POLICE_RATE64={0xc, 0x8, 0xd}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x6}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7fffffffffffffff}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0xbfb, 0x2, 0x9, 0x6, 0x9aa, 0x9, 0x7, 0x6c, 0x4dfd, 0x103, 0xfffffff8, 0x1000, 0x8, 0x0, 0xfff, 0x1ff, 0x0, 0xfffff800, 0x6, 0x760b, 0x3, 0x45, 0x0, 0x7fff, 0x2b8b5f3c, 0x3, 0x2, 0x80000000, 0x9, 0x0, 0x66a7, 0xffffffff, 0x7, 0x3, 0x3, 0xff, 0x8001, 0x0, 0x5, 0x9, 0x2, 0x2, 0x10000, 0x1, 0x5, 0x3, 0x7, 0x5f, 0x4, 0x6, 0x3, 0x40, 0x6c172d95, 0x9d2a, 0x4, 0xfffffffe, 0xa, 0xe, 0x0, 0x1, 0x1, 0x2, 0xa2, 0xf, 0xf, 0xb, 0xa17a, 0x40000003, 0x1, 0x10, 0x0, 0x8, 0xffffffff, 0x286, 0x8, 0x100, 0xfffffff7, 0xf, 0x9, 0xbe22, 0xfffffffd, 0xe0000000, 0x3, 0x6, 0x2, 0x1004, 0x8, 0x800, 0x714, 0x80, 0x1ff, 0x0, 0x9, 0x8, 0x4, 0x7fffffff, 0x9e68, 0x0, 0x5, 0x3, 0x7f, 0x4, 0xf, 0xffff, 0x80000000, 0x2, 0xfffffffd, 0xfff, 0x0, 0x3, 0x4, 0xf, 0x9, 0x70a, 0x6, 0x7, 0x7, 0x101, 0x10, 0x3, 0x26813000, 0x0, 0x10, 0x0, 0x0, 0x7ff, 0x8, 0x6324, 0x6, 0x7, 0x9, 0x7, 0xe, 0x9, 0x5, 0x8000, 0x4, 0x27, 0x7, 0x1, 0xffffffff, 0x0, 0x2, 0x5, 0x8, 0x4, 0x2, 0x5, 0x916, 0x9, 0x0, 0x80, 0x7e, 0x1, 0x0, 0xfffff53d, 0xff, 0xb, 0xb, 0x3, 0x2, 0xfffffbff, 0x3, 0x8b, 0x400, 0x9, 0x80, 0x52, 0x1, 0xd, 0x4, 0x5, 0x5, 0x1, 0x27e, 0xfffffff9, 0x6, 0xf8, 0xf5b, 0x4, 0x1, 0x9, 0x0, 0x101, 0x1, 0x5, 0x0, 0x0, 0x6, 0x90f4, 0xc02, 0xfffffffc, 0x2e, 0x3, 0xff, 0x9, 0x2a, 0x10, 0xd1ef, 0x3ff, 0x100, 0x2, 0x2, 0x80000001, 0x6, 0xfff, 0x98, 0x8fab, 0x3, 0x401, 0x98, 0x5, 0x4, 0x6d79, 0x57, 0x2, 0xbb, 0x100, 0xf, 0x5, 0x7f, 0x3, 0x2, 0x5, 0x401, 0xb0000, 0x2, 0x7ff, 0x3, 0x4, 0x3, 0xfffffffd, 0x101, 0x2, 0xf, 0x400, 0xa, 0x80, 0x4, 0x9, 0x9, 0xc6, 0x3, 0x1a, 0x4, 0x81, 0x9, 0x6, 0xf, 0x5, 0x8, 0x5c, 0x6, 0xfffffffb, 0x7ff]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x10000}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x1}, @TCA_CHAIN={0x8}, @TCA_RATE={0x6, 0x5, {0xaa, 0x2}}]}, 0x8c0}, 0x1, 0x0, 0x0, 0x51}, 0x20040000) (async) shutdown(r1, 0x1) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async) r5 = getpid() (async) mmap(&(0x7f0000a9e000/0x2000)=nil, 0x2000, 0x2000000, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$unix(r7, &(0x7f0000000000), 0x0, 0x8010) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setscheduler(r5, 0x0, &(0x7f0000000000)=0x6) (async, rerun: 64) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) (async, rerun: 64) syz_emit_ethernet(0xb0, &(0x7f0000000280)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}, @random="d6b25e6abe31", @void, {@x25={0x805, {0x3, 0x10, 0x1, "5d21885b5a0a851f8320aefc9fd5b4e3a1226e5a90b141077477270bdc6ca785bf026471db984d09ba797cbf4b95df2c1f24ac208ce31b67a1382d8d231234896e5cd61fae6554068f61b4fafefdec33d06e6a93f82df62ff7936b6f91de56947b32e6d2dcda324a6a7538f3698aeede2e4f77b3ab0a9938e1fa051535cba58381842711fcbe5ae23b93bdd62ffc8e0898f18ffa2cc361be145927f78eb2ad"}}}}, &(0x7f0000000080)={0x1, 0x3, [0x17a, 0xc48, 0xdd5, 0x733]}) 35.717454756s ago: executing program 1 (id=11): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x1a, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0x0, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0xffffffd}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffe0, 0xa}, {0xf, 0x10}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x3}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x55}, 0x4000) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x6, &(0x7f00000006c0)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x8, 0x5, 0xffffffffffffffff, &(0x7f0000000180)="fd9a3d2ddc0a10b89d6b7efa8ba1f5610e6419d4e4d7789f51661f63d38b0fc0e18a25109e2230ad3f8cdc3b0f23d93914b717ba36177e7f9bca2486abcb71914000cc0e10fa5d14431858dde0191bb5f885a13a68a281146a8a7f5a1378a290bc19ef466982cc93316ac854912694bc922fce0775f1", 0x76, 0x1ff, 0x0, 0x1}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x8, 0x4, 0xffffffffffffffff, &(0x7f00000002c0)="6c64eec7edfd5d8890bd393233b9ad80609ab299d533d2fabd4a5458581cab9bf6fa97863eb5fdbfb9aedc621f2e742143745f8305cbdca3", 0x38, 0x3ff, 0x0, 0x2}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x2, 0x2, 0xffffffffffffffff, &(0x7f00000003c0)="991f3ca3e5eb395368d0737ee8a65e9a7b360c4ae965fcc09cce6adf30765d3d89a5c7e05c560f51210f8f4a7d3b12f22eeddde5ca41a99a827e38b348f76ff7baacd0d66f9277817393710e8519c4f4a8ed7fecf1d263d15907cecdad37baaa294f39471a67bbeddb5fed", 0x6b, 0xffffffff911b7fa2, 0x0, 0x2}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x3, 0xb, 0xffffffffffffffff, &(0x7f0000000440)="2d6380159aec71d51daab571101b", 0xe, 0x81, 0x0, 0x1}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x5, r0, &(0x7f0000000500)="24cd8f46733ce23842244f4c583de774f8dd786d2a09dae2089d1e999dc5a60223735cb348e3c63bff18709177f2dc9e09a2481716da12dd23add83310e8237024b242803843347573622ac148d78c1a7df3caf73656e9abeb5b61235b3c53", 0x5f, 0x81}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x5, 0x5, 0xffffffffffffffff, &(0x7f00000005c0)="a6da65c9f76bbf4037dc6c52a7a146b61072b2af8ae6b401a02cb86f3c750cf22b5d45805172c5259df0a5add01b80a11a4f4769d6f15581ba65f5131fef676b99ab7f574d696074d4f403d322c778810988c7377d1590a3f1337aa53171c012b52ffef6dee85e38ba7bc5f8f8114adeb0747d2562fa647374b528be0b545f960e97110782569df99431f933912c93576fbdbf73460116e558611b45565c938c66066de089d588092fb15be4508d2b6c29bd8785573e", 0xb6, 0x0, 0x0, 0x1, r1}]) r3 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r3, &(0x7f0000000a00)=[{{&(0x7f00000004c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000f40)="a905000000007464000100000000000000e5c01104b61aa67bf2154694dfa033fe5312e4", 0x24}], 0x1}}], 0x1, 0xc044) 35.715980184s ago: executing program 2 (id=12): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$xdp(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000480)="fe", 0x1a000}], 0x1, 0x0, 0x0, 0x41}, 0x0) 34.907738853s ago: executing program 4 (id=13): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$xdp(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000480)="fe", 0x1a000}], 0x1, 0x0, 0x0, 0x41}, 0x0) 34.845091903s ago: executing program 1 (id=14): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x4, 0x2, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sysinfo(0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xff, 0x297, &(0x7f0000000040)=0x1) 34.835018899s ago: executing program 0 (id=1): bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x34, 0x70, 0x9d, 0x40, 0x55f, 0xc230, 0xb6ac, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf2, 0xa7, 0xcc}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000880)={0x44, &(0x7f00000005c0)={0x20, 0x15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000000)={0x44, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000003c0)={0x34, &(0x7f0000001800)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000380)={0x40, 0xc}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000340)={0x1c, &(0x7f0000000180)=ANY=[@ANYBLOB='@\v\b\x00\x00\x00'], 0x0, 0x0}) 34.811507807s ago: executing program 2 (id=15): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x208640) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x80000001}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/ip6_mr_vif\x00') read$FUSE(r1, &(0x7f0000006c00)={0x2020}, 0x2020) lseek(r1, 0x7fffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mknod(&(0x7f0000000100)='./file1/file3\x00', 0xc000, 0x7) renameat2(0xffffffffffffff9c, &(0x7f0000002200)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000021c0)='./file1/file3\x00', 0x2) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2, {0x3}}, './file0\x00'}) io_uring_enter(r3, 0x5b13, 0xb3d6, 0x1, &(0x7f0000000080)={[0xffffffffffffffff]}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000008f08000000000000000000008500000061000000850000002a00000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r3, 0x0, 0xe, 0x0, &(0x7f00000000c0)="e30080670000ec67838717bd86dd", 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0xb1c07}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000440), 0x8, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x3, 0x2, 0x4}) ioctl$vim2m_VIDIOC_EXPBUF(r4, 0xc0405668, &(0x7f0000000100)={0x1d, 0x3, 0x2, 0x84000}) ioctl$RTC_UIE_ON(r3, 0x7003) 34.514857698s ago: executing program 4 (id=16): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = memfd_create(&(0x7f0000000500)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0}) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x3c, 0x0, 0x5, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0xfffffffc, 0x67}}}}, [@NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0xc, {0x6, 0x7, 0x397}}}, @NL80211_ATTR_PRIVACY={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4800}, 0x8060040) copy_file_range(r4, &(0x7f00000008c0)=0xfffffffffffffffc, r2, 0x0, 0x3, 0x0) fstat(0xffffffffffffffff, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x842, 0x0) r10 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r10, 0xc01064bd, &(0x7f00000003c0)={&(0x7f0000000340)='L', 0x1}) writev(r9, &(0x7f0000000a40)=[{&(0x7f0000000bc0)="d18a876f8f46c153dde8db040cc7e763ba2fab29aca1a1a2e0a38bc757e61b5aab090000000000000051ed697ff263589940cf437f1efae8e2342bb1adc1c9d8febaecb3aef2d7650869408a287d92d06f5d660a68f3f0a39e926d8dbd6f8d9de335fe4c520feaffc62c3435ab63a2f77234987d3b1130d31bd78fb28883050a1b8dd4ea2cdc62703eb86600dba7da620ad621c21b75893f334cfc82a3931e8cf3dfa12d31fa32797f5a940475fd8947bde48c8126a44eb9", 0xb8}, {0x0}], 0x2) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r11, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f0000000400)=@ethtool_test={0x1a, 0xc, 0x1c, 0x4, [0x463, 0x8, 0x3c3, 0x4e8]}}) 32.45695275s ago: executing program 3 (id=21): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=0x0, @ANYBLOB="0524060000000000300012800b0001006272696467650000200002800c002e00fffff6ffffffffff050007001f000000020027000000000008000a00a8"], 0x6c}}, 0x0) (async) getpeername$packet(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000040)=0x14) (async, rerun: 64) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000080)={0x0, 0x0}) (async, rerun: 64) mount(0x0, 0x0, &(0x7f0000000000)='tmpfs\x00', 0x0, 0x0) (async) socket$nl_rdma(0x10, 0x3, 0x14) (async) set_mempolicy(0x4003, &(0x7f0000000200)=0x7, 0x3) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='freezer.self_freezing\x00', 0x275a, 0x0) write$binfmt_script(r3, 0x0, 0x2c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000080)=0x0) waitid(0x0, r4, &(0x7f0000000240), 0x80000000, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) (async) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r6 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r6, 0xc02c564a, &(0x7f0000000040)={0x0, 0x52424752, 0x2, @stepwise={0x9, 0x4, 0x3, 0x5, 0x200800, 0xff}}) writev(r5, &(0x7f0000000840)=[{0xffffffffffffffff, 0x1}, {0x0}], 0x10000000000002f9) (async) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) (async, rerun: 32) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async, rerun: 32) r8 = accept4(r7, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=@newchain={0x43c, 0x64, 0x100, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xa, 0x2}, {0xfff1}, {0xc, 0xe}}, [@f_rsvp6={{0xa}, {0x40c, 0x2, [@TCA_RSVP_POLICE={0x408, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0x85, 0x8, 0x4, 0x9, 0x4, 0x9, 0xcf, 0x775, 0xfffffffa, 0x3, 0xa2, 0x4, 0x4, 0x6fff, 0x3, 0xf, 0x4, 0x3, 0x6, 0x2, 0x8, 0x7, 0x6, 0xffffffff, 0x9, 0x78, 0x1, 0x2, 0x4, 0x1, 0xfffffee8, 0x5, 0x9, 0xa, 0x5, 0x8000, 0x4d9, 0x0, 0x16, 0x0, 0x8, 0xfffffffa, 0x1ff, 0x5, 0x3ff, 0x7, 0x0, 0x5, 0xfffffff7, 0x8, 0x50ea, 0x6, 0x8001, 0x9, 0xb0e0, 0xf, 0x5, 0x8, 0x3, 0x0, 0x4, 0x5b23, 0x5, 0x8, 0x2, 0xee, 0x7fffffff, 0x7fffffff, 0x3, 0x172, 0x5ae27a20, 0x5, 0x6, 0x4, 0x200, 0x1ff, 0x3, 0x400, 0xe6b3, 0xd171, 0x6, 0x1ff, 0x4, 0x699213b0, 0x9, 0xa, 0x12, 0x3, 0x4, 0x0, 0x100, 0x5, 0x6793, 0x200, 0x9, 0xfffffffa, 0x9, 0x80000000, 0x7, 0x5, 0x0, 0x80000000, 0x400, 0x7, 0x7, 0x5, 0x9, 0x6, 0x9, 0x0, 0x1, 0x5, 0x2, 0x2, 0x2, 0x7ff, 0x40, 0x7f, 0x5fece1ea, 0xbf7, 0x8, 0x78, 0xe, 0x80000000, 0x5, 0x8, 0x5, 0xe, 0x5, 0x200, 0x4, 0x4, 0x0, 0x0, 0x1, 0x3, 0xb, 0x70, 0x2, 0x1, 0x9, 0x1800000, 0x9, 0xbff, 0x4, 0x6, 0x800, 0x7, 0x5, 0x3, 0x9, 0x4, 0x0, 0x2, 0x6, 0x800, 0x3ff, 0x9, 0x3, 0xcc, 0xc60, 0x3, 0x8, 0x4, 0x1, 0x0, 0x7, 0x2, 0x6, 0xc, 0x4, 0x32, 0x2, 0x8, 0x1000, 0x2, 0x4, 0x7, 0x2, 0xffff, 0xb37, 0x7fff, 0xbef, 0x8, 0x5, 0x1, 0x5, 0x0, 0x1, 0xffff, 0x7f, 0x3, 0x94f, 0xc91, 0x9, 0x3, 0x2, 0xd46, 0xf, 0x200, 0x0, 0x8, 0x7fffffff, 0x0, 0x8, 0x2, 0x5, 0xb, 0x5, 0x4, 0x5, 0xd756, 0x6, 0x3, 0x0, 0xd3, 0x2, 0x6, 0x9, 0x4, 0x1000007, 0x5, 0xaec, 0x100, 0x0, 0xfffffffb, 0x40, 0xfffffffe, 0x3, 0x8, 0x7f, 0x1, 0x9c, 0x400, 0x5, 0x8000, 0x8, 0x8, 0x1, 0x6, 0xfff, 0xee2b, 0x7, 0xeaf, 0x3, 0x401, 0x7, 0x7f, 0x5f, 0x1000, 0x7, 0x9, 0x7, 0x8001, 0x9, 0x3]}]}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x1}, 0x40881) recvmmsg(r8, &(0x7f0000006fc0)=[{{0x0, 0x0, &(0x7f0000001f80)=[{&(0x7f0000000d40)=""/13, 0xd}, {&(0x7f0000000d80)=""/247, 0xf7}], 0x2}, 0x3}], 0x1, 0x1, 0x0) (async) mbind(&(0x7f00002e1000/0x1000)=nil, 0x1000, 0x1, &(0x7f0000000000)=0xa636, 0x9, 0x0) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1f, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000000000000000000782e000018010000786c6c25000000000020203a3f1af8ff00000000bfa100000000000007010000f6ffffffb702000008000000b703000001000080850000001000000095", @ANYRESHEX=r2, @ANYRESDEC=r8, @ANYRESOCT=r1], &(0x7f0000000000)='GPL\x00', 0xd, 0x0, 0x0, 0x0, 0x15}, 0x94) prlimit64(r4, 0xe, &(0x7f0000000100)={0x1, 0x8000}, &(0x7f00000001c0)) 32.14248292s ago: executing program 3 (id=22): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x8008af26, &(0x7f0000000040)={0x1}) 31.899015919s ago: executing program 3 (id=23): ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000080)={0x0, 0x1, 0x0, &(0x7f00000009c0)=""/251, 0x0, 0x4000}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000c00000028000580"], 0x3c}}, 0x0) (async) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000c00000028000580"], 0x3c}}, 0x0) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(0xffffffffffffffff, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x70, 0x0, 0xf2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8f1, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6d1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe02e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xcf, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x4, 0x7, 0x800, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4000000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0xd, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x789], 0x1, 0x400}) socket(0x1e, 0x1, 0x0) (async) r3 = socket(0x1e, 0x1, 0x0) connect$tipc(r3, &(0x7f0000000040)=@id, 0x10) recvmmsg(r3, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000200)=""/2, 0x2}], 0x1, &(0x7f0000000e40)=""/120, 0x78}}, {{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000d80)=""/157, 0x9d}], 0x1}}], 0x2, 0x0, 0x0) shutdown(r3, 0x2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x23}, 0x800, 0x0, 0x2, 0x1, 0x80, 0x7}, 0x20) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000007000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000300)="baf80c66b8782fa28f66efbafc0c66ed66b90e0400000f320f3804817944660fc737660f380888aa48360f8c9c000f07650f0d6500baf80c66b8aa24b98166efbafc0cb80000ef66b9800000c00f326635010000000f30", 0x57}], 0x1, 0x4, &(0x7f0000000380)=[@cstype3={0x5, 0xe}], 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x5, 0x7, 0xe51, 0x1, 0x5479, 0x103d, 0x6, 0x0, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0x1, 0x40000000009, 0x5, 0x6a], 0x2000, 0x808d6}) write$rfkill(0xffffffffffffffff, &(0x7f0000000000)={0x3, 0x2, 0x0, 0x0, 0x1}, 0x8) (async) write$rfkill(0xffffffffffffffff, &(0x7f0000000000)={0x3, 0x2, 0x0, 0x0, 0x1}, 0x8) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000013c0)={0xffffffffffffffff, 0xa, {0x0, 0x0, 0x0, 0x5, 0x8000, 0x0, 0x4, 0x1f, 0x10, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "143939c787a16c1ca43f80026d1a8554fe581b59dee430e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d200", "24431a1e77a68e17000000040008000000000000000000e5e900", [0x83]}}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 31.653622463s ago: executing program 4 (id=24): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x1a, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0x0, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0xffffffd}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffe0, 0xa}, {0xf, 0x10}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x3}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x55}, 0x4000) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x6, &(0x7f00000006c0)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x8, 0x5, 0xffffffffffffffff, &(0x7f0000000180)="fd9a3d2ddc0a10b89d6b7efa8ba1f5610e6419d4e4d7789f51661f63d38b0fc0e18a25109e2230ad3f8cdc3b0f23d93914b717ba36177e7f9bca2486abcb71914000cc0e10fa5d14431858dde0191bb5f885a13a68a281146a8a7f5a1378a290bc19ef466982cc93316ac854912694bc922fce0775f1", 0x76, 0x1ff, 0x0, 0x1}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x8, 0x4, 0xffffffffffffffff, &(0x7f00000002c0)="6c64eec7edfd5d8890bd393233b9ad80609ab299d533d2fabd4a5458581cab9bf6fa97863eb5fdbfb9aedc621f2e742143745f8305cbdca3", 0x38, 0x3ff, 0x0, 0x2}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x2, 0x2, 0xffffffffffffffff, &(0x7f00000003c0)="991f3ca3e5eb395368d0737ee8a65e9a7b360c4ae965fcc09cce6adf30765d3d89a5c7e05c560f51210f8f4a7d3b12f22eeddde5ca41a99a827e38b348f76ff7baacd0d66f9277817393710e8519c4f4a8ed7fecf1d263d15907cecdad37baaa294f39471a67bbeddb5fed", 0x6b, 0xffffffff911b7fa2, 0x0, 0x2}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x3, 0xb, 0xffffffffffffffff, &(0x7f0000000440)="2d6380159aec71d51daab571101b", 0xe, 0x81, 0x0, 0x1}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x5, r0, &(0x7f0000000500)="24cd8f46733ce23842244f4c583de774f8dd786d2a09dae2089d1e999dc5a60223735cb348e3c63bff18709177f2dc9e09a2481716da12dd23add83310e8237024b242803843347573622ac148d78c1a7df3caf73656e9abeb5b61235b3c53", 0x5f, 0x81}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x5, 0x5, 0xffffffffffffffff, &(0x7f00000005c0)="a6da65c9f76bbf4037dc6c52a7a146b61072b2af8ae6b401a02cb86f3c750cf22b5d45805172c5259df0a5add01b80a11a4f4769d6f15581ba65f5131fef676b99ab7f574d696074d4f403d322c778810988c7377d1590a3f1337aa53171c012b52ffef6dee85e38ba7bc5f8f8114adeb0747d2562fa647374b528be0b545f960e97110782569df99431f933912c93576fbdbf73460116e558611b45565c938c66066de089d588092fb15be4508d2b6c29bd8785573e", 0xb6, 0x0, 0x0, 0x1, r1}]) r3 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r3, &(0x7f0000000a00)=[{{&(0x7f00000004c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000f40)="a905000000007464000100000000000000e5c01104b61aa67bf2154694dfa033fe5312e4", 0x24}], 0x1}}], 0x1, 0xc044) 31.634369224s ago: executing program 0 (id=25): r0 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x190) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x98) fcntl$setlease(r1, 0x400, 0x1) fcntl$setlease(r0, 0x400, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x4000, 0x20) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffe93) write$FUSE_LSEEK(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0xffffffffffffffda, 0x0, {0xfd}}, 0x18) syz_usb_connect(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="120141011b7636202505019975390102030109022d0001000010000904840402c4c61f00090d0c02000202000a090582020002000110fc926d47823f3e7d65a28ab4cd66fc3ee19a180e6f2e6add6e23c05cbd6b672567fd41d812b07abb76b2fdb6028c9d3e78f8ec111a4ead55a1adfe92b4923790bd96"], 0x0) read$FUSE(r3, &(0x7f00000032c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) prlimit64(r4, 0x0, &(0x7f0000000240)={0x9, 0x2}, &(0x7f0000000440)) sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40810}, 0xc0) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) read$FUSE(r3, &(0x7f0000001280)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_WRITE(r5, &(0x7f0000000200)={0x18, 0xfffffffffffffff5, r6, {0x401}}, 0x18) sendmsg$IPVS_CMD_ZERO(r2, &(0x7f0000001240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x14, 0x0, 0x400, 0x0, 0x8004}, 0x14}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) fsopen(0x0, 0x0) pipe2$watch_queue(&(0x7f0000000000), 0x80) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000dc0)={0x1f, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000085000000d00000009500000009000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 31.401564784s ago: executing program 4 (id=26): socket$inet6_udp(0xa, 0x2, 0x0) syz_usb_connect(0x0, 0x3b, &(0x7f0000000200)=ANY=[@ANYBLOB="12011400c7f36d088d0e0020c621000000010902290001000000000904000000db02ef00052406"], 0x0) socket$inet6(0xa, 0x80003, 0xff) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x80003, 0xff) socket$pptp(0x18, 0x1, 0x2) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setpriority(0x2, 0x0, 0x4) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) prlimit64(0x0, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000840)) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)=@can_newroute={0x1c, 0x18, 0x1, 0x70bd2a, 0x25dfdbfb, {0x1d, 0x1, 0x5}, [@CGW_LIM_HOPS={0x5, 0xd, 0xaa}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000080) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000340)={0x0, 0xcc}, 0x8) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$netlink(0x10, 0x3, 0x15) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r5, 0x7, 0x0, 0x30, 0x0, @in6={0xa, 0x4e21, 0x20007, @mcast2}, @ib={0x1b, 0xfffe, 0x8000000, {"7d900600080000000900"}, 0x0, 0xbcd, 0x6}}}, 0x118) close(0xffffffffffffffff) sendmmsg$inet6(r1, &(0x7f0000000640), 0x0, 0x3404c8d4) 31.263283381s ago: executing program 3 (id=27): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000300)=@security={'security\x00', 0xe, 0x4, 0x2b0, 0xffffffff, 0xf8, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x240, 0x240, 0x240, 0xffffffff, 0x4, &(0x7f0000000200), {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x4, 0x2, 0x4, 0x3, 0x0, 0x4], 0x4, 0x6}, {0x2, [0x4, 0x0, 0x6, 0x6, 0x4, 0x6], 0x6, 0x1}}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0xb7, 0x28, "8b4339262144083f90283c71f224b2fcee2f47d0d3735bee809d59439ece"}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0xfff1, 0xffff, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) clock_adjtime(0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x2000, 0x2, &(0x7f000091e000/0x2000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYRES64=r3], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0xe}, 0x94) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0xffffffffffffffff, @ANYBLOB="010000000000000000001400000018"], 0x44}}, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0xffffffffffffffee, &(0x7f00000003c0)={&(0x7f0000000640)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1f748e770a3342181b925a39d29ddfd89e2a37eb3202f771a802d0373e3f1f351f86a459af687b5c56c44b385ad90fd6c04db0f41b64a7c1b9d1be495d5477040da573586f11", @ANYRES64=0x0], 0x44}}, 0x0) ioctl$FS_IOC_GETFSLABEL(r6, 0x400452c8, &(0x7f0000000100)) openat$cgroup_procs(r0, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) ioctl$BTRFS_IOC_SYNC(r1, 0x9408, 0x0) chdir(&(0x7f0000000240)='./file0\x00') write$cgroup_pid(r1, &(0x7f00000000c0), 0x40) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000a40)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58) accept4$alg(r8, 0x0, 0x0, 0x80800) 30.133592206s ago: executing program 1 (id=28): symlink(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f00000006c0)='./file0\x00') rename(&(0x7f0000000040)='./file0/../file0\x00', 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) r2 = fsopen(&(0x7f0000000040)='ocfs2_dlmfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x8, 0x0, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'tunl0\x00'}) r4 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_LIST_RULES(r4, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x3f5, 0x21, 0x70bd27, 0x25dfdbfc, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 28.843433995s ago: executing program 2 (id=29): r0 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x14, 0x800000000004, @tid=r0}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000001200)={r5, 0x3ff}, &(0x7f0000001240)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000000580)={r6, 0x7, 0xee, 0x7, 0x8000, 0x9, 0x0, 0xffff, {0x0, @in6={{0xa, 0x4e23, 0x8, @dev={0xfe, 0x80, '\x00', 0x19}, 0xbbe1}}, 0xffffff00, 0x0, 0xc, 0x44, 0xb}}, &(0x7f0000000200)=0xb0) r7 = socket$kcm(0x1e, 0x5, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60004, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r8, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNATTACHFILTER(r8, 0x401054d5, 0x0) sendmsg$kcm(r7, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0xfdef}], 0x1}, 0x0) recvmsg(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/254, 0xfe}], 0x1, &(0x7f0000000480)=""/5, 0x5}, 0x40000010) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) listen(r4, 0x1fc) accept4(r1, 0x0, 0x0, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) mlock(&(0x7f0000002000/0x2000)=nil, 0x2000) socket(0x22, 0x6, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000000000006eacc3c00"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r9 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r9, &(0x7f0000019680)=""/102392, 0x18ff8) 28.721836309s ago: executing program 1 (id=30): r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f00000000c0)=0x0, &(0x7f00000001c0)=0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', r1, 0x2}, 0x2f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() connect$ax25(r3, 0x0, 0x0) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x55779000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r7) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) madvise(&(0x7f0000304000/0x3000)=nil, 0x3000, 0x9) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e23, 0x34, @private2={0xfc, 0x2, '\x00', 0x1}, 0x400105}, 0x1c) listen(r8, 0x0) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='mpol=interleave=stotic:,']) connect$inet(r9, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r10 = accept(r7, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0xc000}, 0x10) recvfrom(r9, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) fsopen(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x4008032, 0xffffffffffffffff, 0x0) 28.345314278s ago: executing program 0 (id=31): syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x20, 0x80, 0xe, {0x200f, 0x3, 0x9, 0x2, 0x7, 0x7ffa, 0x3, 0x3, 0x6, 0xfffc, 0x2, 0xf8}}, 0x0, 0x0, 0x0, 0x0}) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x4, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x100, 0x0, 0x65dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xffff}, {0xffff, 0xfff1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_TARGET={0x8, 0x3, 0x20}, @TCA_FQ_PIE_BETA={0x8, 0x6, 0x1b}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_clone3(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) r5 = semget$private(0x0, 0x6, 0x0) semctl$IPC_RMID(r5, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r6, 0x0, 0x0}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) 27.294080973s ago: executing program 1 (id=32): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000080)={0x6, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240), 0x0) syz_emit_ethernet(0x2a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) shmget$private(0x0, 0x2000, 0x100, &(0x7f0000ff9000/0x2000)=nil) r4 = socket(0x40000000015, 0x5, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r3, 0x8982, &(0x7f0000000380)) bind$inet(r4, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$xdp(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000480)="fe", 0x1a000}], 0x1, 0x0, 0x0, 0x41}, 0x0) read$FUSE(r0, &(0x7f0000003980)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r7 = syz_io_uring_setup(0x239, &(0x7f0000000980)={0x0, 0x8000000, 0x400}, &(0x7f0000000300)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}) io_uring_enter(r7, 0x2def, 0x0, 0x0, 0x0, 0x0) write$FUSE_ATTR(r0, &(0x7f0000000240)={0x78, 0x0, r5, {0x7, 0x0, 0x0, {0x5, 0x4, 0xd2, 0x800000000000000, 0x0, 0x0, 0x8, 0x0, 0x80000000, 0x1000, 0x40, r6}}}, 0x78) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r12 = dup(r11) ioctl$KVM_SET_MSRS(r12, 0xc008ae88, &(0x7f0000000480)=ANY=[@ANYBLOB="73000000000000008b"]) sendmsg$nl_generic(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000002d00091327bd70000000000006"], 0x20}}, 0x84) 26.405782672s ago: executing program 4 (id=33): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x15, @remote, 'bond0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r0, 0x40047452, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x48) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000008500000018000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x2f, 0xe, 0x0, &(0x7f0000000400)="e4e647c9e0b8e9a2f2ab3026da58", 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) r6 = fcntl$dupfd(r3, 0x406, r5) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=0x0) sendmsg$nfc_llcp(r6, &(0x7f0000000600)={&(0x7f0000000340)={0x27, r7, 0x0, 0x5, 0x31, 0x8, "b7c598cfe4f5c1eb2f2d508522b024580329e159d952c44c4a1dbfb7f14fdb7c998f8f2bfdd9affa120d19f890da60a532603baafaec0f7a64a9421519dae0"}, 0x60, &(0x7f0000000440)=[{&(0x7f00000003c0)="28ccaa831597ea7a02e784dd0d62b17b84e1d1bdfb5ad5329a97fd4f25850140773fca132016", 0x26}, {&(0x7f0000000400)="24dffd7ce4", 0x5}, {&(0x7f0000000500)="a9edc4631afd06aebd40844a39edd5d0a663ae9da92693b77893908078c267af11cd72432b1b6e9a69eba17febfd9bb00dbef87d7939f40362260fb356ba8c316002a15d2f7a31de999a615ae619a3510126c5d6ffae06d5657cd8fbf7c2019b38abbf5c13bf4aa98e5faac288d8fde9ea3cd05813fd84f25145e159215e928d517f684685ab6cc21be8294b457279119f7e48e4996d8bc7c3a74a3ae55d071b4b87b2209d183503e72a38ece0ea4d07294c56fee538add6426f467ce4aac3c25c87e1d2a022e5aa37", 0xc9}], 0x3, 0x0, 0x0, 0x20000084}, 0x4000) syz_emit_ethernet(0x46, &(0x7f00000002c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x2, 0x38, 0x0, 0x0, 0x2, 0x6, 0x0, @empty, @empty}, {{0x10, 0x4e26, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0xc2, 0x1, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x4, 0xd}, @mss={0x2, 0x4, 0x5df4}, @sack={0x5, 0x2}]}}}}}}}, 0x0) connect$unix(r2, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20802, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000080)=0xd) r10 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) r11 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r11, @ANYBLOB=',wfdno=', @ANYRESHEX=r10]) write$binfmt_aout(r11, &(0x7f0000000200)=ANY=[], 0x20) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="6000000002060102000000000000000000000000090002f972f3323beb0073797a32000000000500040000000000050005000200000014020000686173683a69702c706f72742c697000140007800800060007000000"], 0x60}}, 0x20000000) 25.859187276s ago: executing program 0 (id=34): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = getpid() syz_pidfd_open(r0, 0x0) syz_usb_connect(0x6, 0x2c9, &(0x7f0000000780)={{0x12, 0x1, 0x201, 0x40, 0xd8, 0x5b, 0xc7, 0x13b1, 0x11, 0x5c34, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2b7, 0x3, 0x4, 0x8, 0x0, 0x7, [{{0x9, 0x4, 0x88, 0x4, 0x9, 0xf7, 0xf9, 0x8a, 0x6, [@cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, "d2cf"}, {0x5, 0x24, 0x0, 0x621c}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x2, 0x5, 0x2}, [@network_terminal={0x7, 0x24, 0xa, 0x56, 0x0, 0x21, 0xb}, @country_functional={0x8, 0x24, 0x7, 0xbb, 0xb, [0x3500]}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0x94}]}], [{{0x9, 0x5, 0x9, 0x4, 0x20, 0x1, 0x7, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0xc0, 0x4a, 0xa91}, @generic={0x14, 0x1, "f50510c401aaa61fd1a25de655743dd9c64a"}]}}, {{0x9, 0x5, 0x3, 0x4, 0x400, 0x0, 0x1, 0xe}}, {{0x9, 0x5, 0xa, 0xc, 0x40, 0xa, 0x0, 0x6}}, {{0x9, 0x5, 0x5, 0x4, 0x10, 0xf4, 0x0, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x81, 0x2}]}}, {{0x9, 0x5, 0x7, 0x3, 0x20, 0x0, 0xaf, 0xb7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3e, 0x7ff}]}}, {{0x9, 0x5, 0xd, 0x3, 0x40, 0x24, 0x8, 0x8}}, {{0x9, 0x5, 0x1, 0xc, 0x10, 0x7, 0x2, 0x1}}, {{0x9, 0x5, 0x4, 0x3, 0x200, 0x7f, 0xf6, 0x7}}, {{0x9, 0x5, 0x80, 0x3, 0x1c4aa9c632bf544, 0xdf, 0x7, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0x5}]}}]}}, {{0x9, 0x4, 0x3, 0x8, 0x3, 0x53, 0xee, 0x97, 0x5, [@uac_control={{0xa, 0x24, 0x1, 0xaf9}, [@feature_unit={0xb, 0x24, 0x6, 0x2, 0x2, 0x2, [0xa, 0x1]}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x307, 0x2, 0x2, 0x8}]}, @uac_as={[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x1, 0x2, 0x5, 0x7, "", 'b<\n'}]}], [{{0x9, 0x5, 0x8, 0x10, 0x20, 0x9, 0x9, 0xc, [@generic={0xe8, 0x1, "04d5abb282c498eee79f09b457e4eb03957388a53a5c574e0d2a0367adc6eed3f8095563f68203dedc1d85075d9471e9f79e24b0cacc555124830dc45118f9298acb4b7bcb0f35151b48ed03cadbe732eca34d4619f4ac0a4685095d23926437e712f3d666ae08a116645d7d017d3af0cbe03150f04ed5c04d461a08315d4b5ac0f4c7e6672544168b344e4d92767f3a382ae2e6495880cefc1c75ed501d262da981d341ef27c54a07325088a55a2d21bde5ec9401992fa6cc4b0bd58534ef3211ea1d6d115a2608e80654ed291197d746403e53be28649bfa0c0c0ec571d3ff8374db2515d3"}]}}, {{0x9, 0x5, 0xf, 0x3, 0x400, 0x6, 0x9, 0xfe}}, {{0x9, 0x5, 0xd, 0x0, 0x400, 0x2, 0x7, 0xe}}]}}, {{0x9, 0x4, 0x51, 0xa, 0x1, 0xff, 0xff, 0xff, 0x4, [@uac_control={{0xa, 0x24, 0x1, 0xb30, 0x9}, [@output_terminal={0x9, 0x24, 0x3, 0x6, 0x307, 0x3, 0x2, 0x4}, @mixer_unit={0x7, 0x24, 0x4, 0x6, 0x3, 'Qa'}]}, @uac_as], [{{0x9, 0x5, 0x9, 0xc, 0x10, 0x6, 0x9, 0xe, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x1}, @generic={0x91, 0x21, "3534b186851fc43cd1e61f3f18d36db088978c7f992b26ef3bbac46ba3223c890785ac69f1be545ccfdad5685385c00f866bc6312f3d2b9caa8363ebab24c833888152f3e804c931a58dc3a7cd5630145fd3704ba985ee942779c3796a3c35c07a6bc3ed98c261e35737f7b75bfe4bde9f21681220f4d7c76c6c37d7d039a99b5dcd1a7500f3bedfdc33f35d2e375a"}]}}]}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x110, 0x9, 0x2, 0xf4, 0x20, 0x93}, 0x27, &(0x7f00000001c0)=ANY=[@ANYBLOB="050f27000122100470d28dc80cd6131eb38c0c2a95dfe341d8b4efbdbc211460a0c2c3"], 0x1, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x406}}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x8000000002) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) prlimit64(r1, 0x7, 0x0, 0x0) socket(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) r5 = creat(&(0x7f00000005c0)='./file0\x00', 0x0) write$P9_RSTATu(r5, 0x0, 0x5a) mount(&(0x7f0000000080)=@nullb, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='vfat\x00', 0xa08410, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TCSETS(r6, 0x5402, &(0x7f0000000100)={0x6, 0x73, 0x2, 0xc9f, 0x59, "88bd91aa90758062b5fffd9272e301aa98af75"}) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) prlimit64(0x0, 0x8, 0x0, &(0x7f0000000300)) write$UHID_INPUT(r6, &(0x7f0000001980)={0x9, {"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", 0x745}}, 0x1006) ioctl$FS_IOC_SETFLAGS(r4, 0x40186f40, &(0x7f0000000440)=0x1f) syz_clone(0x120e1100, 0x0, 0x0, 0x0, 0x0, 0x0) 6.367871507s ago: executing program 32 (id=34): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = getpid() syz_pidfd_open(r0, 0x0) syz_usb_connect(0x6, 0x2c9, &(0x7f0000000780)={{0x12, 0x1, 0x201, 0x40, 0xd8, 0x5b, 0xc7, 0x13b1, 0x11, 0x5c34, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2b7, 0x3, 0x4, 0x8, 0x0, 0x7, [{{0x9, 0x4, 0x88, 0x4, 0x9, 0xf7, 0xf9, 0x8a, 0x6, [@cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, "d2cf"}, {0x5, 0x24, 0x0, 0x621c}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x2, 0x5, 0x2}, [@network_terminal={0x7, 0x24, 0xa, 0x56, 0x0, 0x21, 0xb}, @country_functional={0x8, 0x24, 0x7, 0xbb, 0xb, [0x3500]}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0x94}]}], [{{0x9, 0x5, 0x9, 0x4, 0x20, 0x1, 0x7, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0xc0, 0x4a, 0xa91}, @generic={0x14, 0x1, "f50510c401aaa61fd1a25de655743dd9c64a"}]}}, {{0x9, 0x5, 0x3, 0x4, 0x400, 0x0, 0x1, 0xe}}, {{0x9, 0x5, 0xa, 0xc, 0x40, 0xa, 0x0, 0x6}}, {{0x9, 0x5, 0x5, 0x4, 0x10, 0xf4, 0x0, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x81, 0x2}]}}, {{0x9, 0x5, 0x7, 0x3, 0x20, 0x0, 0xaf, 0xb7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3e, 0x7ff}]}}, {{0x9, 0x5, 0xd, 0x3, 0x40, 0x24, 0x8, 0x8}}, {{0x9, 0x5, 0x1, 0xc, 0x10, 0x7, 0x2, 0x1}}, {{0x9, 0x5, 0x4, 0x3, 0x200, 0x7f, 0xf6, 0x7}}, {{0x9, 0x5, 0x80, 0x3, 0x1c4aa9c632bf544, 0xdf, 0x7, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0x5}]}}]}}, {{0x9, 0x4, 0x3, 0x8, 0x3, 0x53, 0xee, 0x97, 0x5, [@uac_control={{0xa, 0x24, 0x1, 0xaf9}, [@feature_unit={0xb, 0x24, 0x6, 0x2, 0x2, 0x2, [0xa, 0x1]}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x307, 0x2, 0x2, 0x8}]}, @uac_as={[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x1, 0x2, 0x5, 0x7, "", 'b<\n'}]}], [{{0x9, 0x5, 0x8, 0x10, 0x20, 0x9, 0x9, 0xc, [@generic={0xe8, 0x1, "04d5abb282c498eee79f09b457e4eb03957388a53a5c574e0d2a0367adc6eed3f8095563f68203dedc1d85075d9471e9f79e24b0cacc555124830dc45118f9298acb4b7bcb0f35151b48ed03cadbe732eca34d4619f4ac0a4685095d23926437e712f3d666ae08a116645d7d017d3af0cbe03150f04ed5c04d461a08315d4b5ac0f4c7e6672544168b344e4d92767f3a382ae2e6495880cefc1c75ed501d262da981d341ef27c54a07325088a55a2d21bde5ec9401992fa6cc4b0bd58534ef3211ea1d6d115a2608e80654ed291197d746403e53be28649bfa0c0c0ec571d3ff8374db2515d3"}]}}, {{0x9, 0x5, 0xf, 0x3, 0x400, 0x6, 0x9, 0xfe}}, {{0x9, 0x5, 0xd, 0x0, 0x400, 0x2, 0x7, 0xe}}]}}, {{0x9, 0x4, 0x51, 0xa, 0x1, 0xff, 0xff, 0xff, 0x4, [@uac_control={{0xa, 0x24, 0x1, 0xb30, 0x9}, [@output_terminal={0x9, 0x24, 0x3, 0x6, 0x307, 0x3, 0x2, 0x4}, @mixer_unit={0x7, 0x24, 0x4, 0x6, 0x3, 'Qa'}]}, @uac_as], [{{0x9, 0x5, 0x9, 0xc, 0x10, 0x6, 0x9, 0xe, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x1}, @generic={0x91, 0x21, "3534b186851fc43cd1e61f3f18d36db088978c7f992b26ef3bbac46ba3223c890785ac69f1be545ccfdad5685385c00f866bc6312f3d2b9caa8363ebab24c833888152f3e804c931a58dc3a7cd5630145fd3704ba985ee942779c3796a3c35c07a6bc3ed98c261e35737f7b75bfe4bde9f21681220f4d7c76c6c37d7d039a99b5dcd1a7500f3bedfdc33f35d2e375a"}]}}]}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x110, 0x9, 0x2, 0xf4, 0x20, 0x93}, 0x27, &(0x7f00000001c0)=ANY=[@ANYBLOB="050f27000122100470d28dc80cd6131eb38c0c2a95dfe341d8b4efbdbc211460a0c2c3"], 0x1, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x406}}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x8000000002) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) prlimit64(r1, 0x7, 0x0, 0x0) socket(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) r5 = creat(&(0x7f00000005c0)='./file0\x00', 0x0) write$P9_RSTATu(r5, 0x0, 0x5a) mount(&(0x7f0000000080)=@nullb, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='vfat\x00', 0xa08410, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TCSETS(r6, 0x5402, &(0x7f0000000100)={0x6, 0x73, 0x2, 0xc9f, 0x59, "88bd91aa90758062b5fffd9272e301aa98af75"}) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) prlimit64(0x0, 0x8, 0x0, &(0x7f0000000300)) write$UHID_INPUT(r6, &(0x7f0000001980)={0x9, {"a2e3ad214fc752f91b5b09094bf70e0dd038e7ff7fc6e5539b324c078b089b3438076d1a0890e0878f0e1ac6e7049b076d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b32310d076d0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e01000000138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12d3099dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f6dc7bcbf2a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b4bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509301815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827466cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d951061ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033095563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db87195358bfee2916580dacae008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2df086dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36ffffffff00000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817b97c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d00000f4ff000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x745}}, 0x1006) ioctl$FS_IOC_SETFLAGS(r4, 0x40186f40, &(0x7f0000000440)=0x1f) syz_clone(0x120e1100, 0x0, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 33 (id=32): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000080)={0x6, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240), 0x0) syz_emit_ethernet(0x2a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) shmget$private(0x0, 0x2000, 0x100, &(0x7f0000ff9000/0x2000)=nil) r4 = socket(0x40000000015, 0x5, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r3, 0x8982, &(0x7f0000000380)) bind$inet(r4, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$xdp(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000480)="fe", 0x1a000}], 0x1, 0x0, 0x0, 0x41}, 0x0) read$FUSE(r0, &(0x7f0000003980)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r7 = syz_io_uring_setup(0x239, &(0x7f0000000980)={0x0, 0x8000000, 0x400}, &(0x7f0000000300)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}) io_uring_enter(r7, 0x2def, 0x0, 0x0, 0x0, 0x0) write$FUSE_ATTR(r0, &(0x7f0000000240)={0x78, 0x0, r5, {0x7, 0x0, 0x0, {0x5, 0x4, 0xd2, 0x800000000000000, 0x0, 0x0, 0x8, 0x0, 0x80000000, 0x1000, 0x40, r6}}}, 0x78) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r12 = dup(r11) ioctl$KVM_SET_MSRS(r12, 0xc008ae88, &(0x7f0000000480)=ANY=[@ANYBLOB="73000000000000008b"]) sendmsg$nl_generic(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000002d00091327bd70000000000006"], 0x20}}, 0x84) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.211' (ED25519) to the list of known hosts. [ 90.563893][ T5822] cgroup: Unknown subsys name 'net' [ 90.731380][ T5822] cgroup: Unknown subsys name 'cpuset' [ 90.741065][ T5822] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 92.159453][ T10] cfg80211: failed to load regulatory.db [ 92.528213][ T5822] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 97.415461][ T5848] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 97.430494][ T5849] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 97.439295][ T5849] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 97.447831][ T5853] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 97.448256][ T5849] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 97.456194][ T5853] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 97.463994][ T5849] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 97.472771][ T5853] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 97.477716][ T5849] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 97.485408][ T5853] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 97.492483][ T5849] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 97.507334][ T5854] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 97.517074][ T5854] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 97.529810][ T5854] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 97.548047][ T5854] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 97.553590][ T5154] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 97.597500][ T5854] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 97.608464][ T5853] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 97.609867][ T5854] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 97.627593][ T5853] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 97.635396][ T5853] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 97.645459][ T5853] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 97.653625][ T5853] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 97.657767][ T5854] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 97.671048][ T5848] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 98.204090][ T5841] chnl_net:caif_netlink_parms(): no params data found [ 98.339441][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 98.537687][ T5847] chnl_net:caif_netlink_parms(): no params data found [ 98.611698][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 98.625722][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.633826][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.642429][ T5841] bridge_slave_0: entered allmulticast mode [ 98.649877][ T5841] bridge_slave_0: entered promiscuous mode [ 98.660013][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.667314][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.674510][ T5841] bridge_slave_1: entered allmulticast mode [ 98.682864][ T5841] bridge_slave_1: entered promiscuous mode [ 98.842211][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.851022][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.860191][ T5839] bridge_slave_0: entered allmulticast mode [ 98.871558][ T5839] bridge_slave_0: entered promiscuous mode [ 98.896368][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.910696][ T5855] chnl_net:caif_netlink_parms(): no params data found [ 98.931145][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.939063][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.946401][ T5839] bridge_slave_1: entered allmulticast mode [ 98.953924][ T5839] bridge_slave_1: entered promiscuous mode [ 98.968670][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.081560][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.095091][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.138793][ T5841] team0: Port device team_slave_0 added [ 99.196270][ T5841] team0: Port device team_slave_1 added [ 99.216443][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.224774][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.232594][ T5847] bridge_slave_0: entered allmulticast mode [ 99.240799][ T5847] bridge_slave_0: entered promiscuous mode [ 99.265687][ T5839] team0: Port device team_slave_0 added [ 99.320871][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.328505][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.335998][ T5847] bridge_slave_1: entered allmulticast mode [ 99.343874][ T5847] bridge_slave_1: entered promiscuous mode [ 99.368040][ T5839] team0: Port device team_slave_1 added [ 99.374034][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.381546][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.389349][ T5840] bridge_slave_0: entered allmulticast mode [ 99.397076][ T5840] bridge_slave_0: entered promiscuous mode [ 99.419817][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.427659][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.454823][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.495867][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.503269][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.511118][ T5840] bridge_slave_1: entered allmulticast mode [ 99.518556][ T5840] bridge_slave_1: entered promiscuous mode [ 99.527922][ T5855] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.535101][ T5855] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.545065][ T5855] bridge_slave_0: entered allmulticast mode [ 99.552532][ T5855] bridge_slave_0: entered promiscuous mode [ 99.561575][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.568930][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.595888][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.607803][ T51] Bluetooth: hci1: command tx timeout [ 99.610770][ T5848] Bluetooth: hci0: command tx timeout [ 99.614090][ T5854] Bluetooth: hci2: command tx timeout [ 99.629695][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.667461][ T5855] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.674992][ T5855] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.682554][ T5855] bridge_slave_1: entered allmulticast mode [ 99.690306][ T5855] bridge_slave_1: entered promiscuous mode [ 99.723554][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.751574][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.757197][ T5854] Bluetooth: hci4: command tx timeout [ 99.759606][ T5848] Bluetooth: hci3: command tx timeout [ 99.764966][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.798073][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.842705][ T5855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.856462][ T5855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.880607][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.888476][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.915298][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.930483][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.944019][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.970037][ T5847] team0: Port device team_slave_0 added [ 100.035486][ T5847] team0: Port device team_slave_1 added [ 100.044446][ T5855] team0: Port device team_slave_0 added [ 100.056461][ T5855] team0: Port device team_slave_1 added [ 100.081319][ T5841] hsr_slave_0: entered promiscuous mode [ 100.088266][ T5841] hsr_slave_1: entered promiscuous mode [ 100.187850][ T5840] team0: Port device team_slave_0 added [ 100.194760][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.205092][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.232545][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.275395][ T5839] hsr_slave_0: entered promiscuous mode [ 100.282586][ T5839] hsr_slave_1: entered promiscuous mode [ 100.289070][ T5839] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 100.297681][ T5839] Cannot create hsr debugfs directory [ 100.304869][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.312250][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.338843][ T5855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.352721][ T5840] team0: Port device team_slave_1 added [ 100.361773][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.369037][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.395558][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.446129][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.455663][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.487905][ T5855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.607292][ T5847] hsr_slave_0: entered promiscuous mode [ 100.614308][ T5847] hsr_slave_1: entered promiscuous mode [ 100.622412][ T5847] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 100.631066][ T5847] Cannot create hsr debugfs directory [ 100.662430][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.669921][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.697482][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.712829][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.720709][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.747583][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.846792][ T5855] hsr_slave_0: entered promiscuous mode [ 100.853898][ T5855] hsr_slave_1: entered promiscuous mode [ 100.860851][ T5855] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 100.869072][ T5855] Cannot create hsr debugfs directory [ 101.046850][ T5840] hsr_slave_0: entered promiscuous mode [ 101.055869][ T5840] hsr_slave_1: entered promiscuous mode [ 101.062517][ T5840] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 101.070895][ T5840] Cannot create hsr debugfs directory [ 101.433838][ T5839] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 101.450156][ T5839] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 101.479258][ T5839] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 101.506819][ T5839] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 101.594903][ T5841] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 101.624753][ T5841] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 101.638950][ T5841] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 101.651632][ T5841] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 101.677200][ T5848] Bluetooth: hci0: command tx timeout [ 101.677567][ T5854] Bluetooth: hci2: command tx timeout [ 101.682931][ T5848] Bluetooth: hci1: command tx timeout [ 101.765731][ T5855] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 101.783150][ T5855] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 101.796809][ T5855] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 101.821762][ T5855] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 101.837482][ T51] Bluetooth: hci4: command tx timeout [ 101.843161][ T5848] Bluetooth: hci3: command tx timeout [ 101.973827][ T5847] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 101.985605][ T5847] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 102.005293][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.013624][ T5847] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 102.046481][ T5847] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 102.121298][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.157521][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.164901][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.194533][ T5840] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 102.206262][ T5840] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 102.233423][ T5840] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 102.249132][ T1036] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.256403][ T1036] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.275150][ T5840] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 102.304880][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.443248][ T5855] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.483765][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.579045][ T1036] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.586270][ T1036] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.603207][ T1036] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.612554][ T1036] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.639175][ T5855] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.677098][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.684312][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.792639][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.800815][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.833126][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.925601][ T5847] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.955547][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.035715][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.065977][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.073394][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.142186][ T3921] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.150262][ T3921] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.259200][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.308041][ T5839] veth0_vlan: entered promiscuous mode [ 103.324271][ T5839] veth1_vlan: entered promiscuous mode [ 103.350855][ T1036] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.358303][ T1036] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.404425][ T1036] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.411882][ T1036] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.492456][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.556810][ T5855] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.576642][ T5840] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 103.590447][ T5840] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 103.627741][ T5839] veth0_macvtap: entered promiscuous mode [ 103.682417][ T5839] veth1_macvtap: entered promiscuous mode [ 103.760620][ T51] Bluetooth: hci2: command tx timeout [ 103.760629][ T5854] Bluetooth: hci0: command tx timeout [ 103.773327][ T5848] Bluetooth: hci1: command tx timeout [ 103.873118][ T5841] veth0_vlan: entered promiscuous mode [ 103.886436][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.917691][ T5848] Bluetooth: hci3: command tx timeout [ 103.923740][ T5848] Bluetooth: hci4: command tx timeout [ 103.924952][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.003250][ T5839] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.016850][ T5839] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.026249][ T5839] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.037548][ T5839] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.053872][ T5841] veth1_vlan: entered promiscuous mode [ 104.070274][ T5855] veth0_vlan: entered promiscuous mode [ 104.101082][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.116524][ T5855] veth1_vlan: entered promiscuous mode [ 104.206493][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.284492][ T5841] veth0_macvtap: entered promiscuous mode [ 104.342823][ T5841] veth1_macvtap: entered promiscuous mode [ 104.376593][ T5855] veth0_macvtap: entered promiscuous mode [ 104.401063][ T3921] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.417085][ T3921] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.441118][ T5855] veth1_macvtap: entered promiscuous mode [ 104.551883][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.564917][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.572096][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.593522][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.619370][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.628285][ T5840] veth0_vlan: entered promiscuous mode [ 104.651154][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.674104][ T5841] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.684998][ T5841] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.695340][ T5841] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.704379][ T5841] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.722146][ T5840] veth1_vlan: entered promiscuous mode [ 104.761322][ T5855] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.775162][ T5839] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 104.787349][ T5855] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.799408][ T5855] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.808243][ T5855] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.191434][ T5847] veth0_vlan: entered promiscuous mode [ 105.252898][ T5847] veth1_vlan: entered promiscuous mode [ 105.352173][ T5847] veth0_macvtap: entered promiscuous mode [ 105.372229][ T5847] veth1_macvtap: entered promiscuous mode [ 105.413714][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.436411][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.466382][ T5847] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.481593][ T5847] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.494863][ T5847] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.509238][ T5847] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.794306][ T1036] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.796023][ T5840] veth0_macvtap: entered promiscuous mode [ 105.806043][ T1036] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.838879][ T51] Bluetooth: hci2: command tx timeout [ 105.839809][ T5854] Bluetooth: hci0: command tx timeout [ 105.844361][ T5848] Bluetooth: hci1: command tx timeout [ 105.892621][ T5840] veth1_macvtap: entered promiscuous mode [ 106.007278][ T5848] Bluetooth: hci4: command tx timeout [ 106.013305][ T5854] Bluetooth: hci3: command tx timeout [ 106.054690][ T3921] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.067434][ T3921] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.189623][ T3921] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.200962][ T3921] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.219397][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.229971][ T5965] PKCS8: Unsupported PKCS#8 version [ 106.278950][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.292389][ T5840] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.302089][ T5840] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.311839][ T5840] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.321947][ T5840] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.343018][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.368789][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.397892][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.426000][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.579850][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.610624][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.713803][ T5971] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'. [ 106.791482][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.938452][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.077398][ T5920] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 107.143776][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.220164][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.253953][ T5920] usb 4-1: Using ep0 maxpacket: 16 [ 107.297618][ T5980] overlayfs: failed to resolve './file0': -2 [ 107.439947][ T5920] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 107.823599][ T5920] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 107.906228][ T5920] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 108.001540][ T5920] usb 4-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=1f.5a [ 108.051963][ T5920] usb 4-1: New USB device strings: Mfr=151, Product=2, SerialNumber=3 [ 108.101390][ T5920] usb 4-1: Product: syz [ 108.105922][ T5920] usb 4-1: Manufacturer: syz [ 108.152305][ T5920] usb 4-1: SerialNumber: syz [ 108.252446][ T5920] usb 4-1: config 0 descriptor?? [ 108.330546][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 108.387368][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 108.617729][ T5926] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 108.624097][ T5920] pegasus_notetaker 4-1:0.0: probe with driver pegasus_notetaker failed with error -12 [ 108.817307][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 108.841771][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 109.043075][ T5920] usb 4-1: USB disconnect, device number 2 [ 109.152363][ T5926] usb 1-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 109.167057][ T5926] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.188243][ T5926] usb 1-1: Product: syz [ 109.192488][ T5926] usb 1-1: Manufacturer: syz [ 109.231576][ T5926] usb 1-1: SerialNumber: syz [ 109.263874][ T5926] usb 1-1: config 0 descriptor?? [ 109.282695][ T6000] process 'syz.4.16' launched '/dev/fd/4' with NULL argv: empty string added [ 109.325245][ T5926] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 109.518563][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 109.529178][ T5926] gspca_sunplus: reg_r err -32 [ 109.557760][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 109.617186][ T5926] sunplus 1-1:0.0: probe with driver sunplus failed with error -32 [ 109.643000][ T10] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 109.730962][ T6007] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.18'. [ 109.745284][ T6007] netlink: zone id is out of range [ 109.752850][ T6007] netlink: zone id is out of range [ 109.761524][ T6007] netlink: get zone limit has 8 unknown bytes [ 110.049980][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 110.209516][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 110.256157][ T10] usb 5-1: config 5 has an invalid interface number: 215 but max is 0 [ 110.292416][ T6007] IPv6: sit1: Disabled Multicast RS [ 110.302290][ T10] usb 5-1: config 5 has no interface number 0 [ 110.342981][ T10] usb 5-1: config 5 interface 215 has no altsetting 0 [ 110.382939][ T10] usb 5-1: New USB device found, idVendor=1163, idProduct=0100, bcdDevice=dc.ba [ 110.405676][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.415085][ T10] usb 5-1: Product: syz [ 110.419811][ T10] usb 5-1: Manufacturer: syz [ 110.424641][ T10] usb 5-1: SerialNumber: syz [ 110.522936][ T6015] netlink: 20 bytes leftover after parsing attributes in process `syz.3.21'. [ 110.539774][ T6015] netlink: 8 bytes leftover after parsing attributes in process `syz.3.21'. [ 110.597104][ T5920] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 110.675805][ T10] cypress_m8 5-1:5.215: DeLorme Earthmate USB converter detected [ 110.703206][ T10] usb 5-1: DeLorme Earthmate USB converter now attached to ttyUSB0 [ 110.727360][ T10] usb 5-1: USB disconnect, device number 2 [ 110.765123][ T10] earthmate ttyUSB0: DeLorme Earthmate USB converter now disconnected from ttyUSB0 [ 110.767098][ T5920] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.789609][ T10] cypress_m8 5-1:5.215: device disconnected [ 110.832259][ T5920] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.862817][ T5920] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 110.887097][ T5920] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.930065][ T5920] usb 3-1: config 0 descriptor?? [ 111.057778][ T6025] netlink: 36 bytes leftover after parsing attributes in process `syz.3.23'. [ 111.067729][ T6026] netlink: 36 bytes leftover after parsing attributes in process `syz.3.23'. [ 111.131297][ T6025] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 111.245063][ T5921] usb 1-1: USB disconnect, device number 2 [ 111.837619][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 111.919414][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 112.607328][ T977] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 112.669660][ T5926] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 112.677061][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 112.698823][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 112.847438][ T5926] usb 1-1: device descriptor read/64, error -71 [ 112.878090][ T977] usb 5-1: Using ep0 maxpacket: 8 [ 112.912877][ T977] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 112.933220][ T977] usb 5-1: New USB device found, idVendor=0e8d, idProduct=2000, bcdDevice=21.c6 [ 112.962275][ T977] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.003325][ T977] usb 5-1: config 0 descriptor?? [ 113.107398][ T5926] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 113.895467][ T5926] usb 1-1: device descriptor read/64, error -71 [ 114.097528][ T5926] usb usb1-port1: attempt power cycle [ 114.154088][ T5945] usb 5-1: USB disconnect, device number 3 [ 114.292282][ T5920] uclogic 0003:256C:006D.0001: failed retrieving Huion firmware version: -71 [ 114.292850][ T6050] syzkaller0: tun_chr_ioctl cmd 1074812117 [ 114.321491][ T5920] uclogic 0003:256C:006D.0001: failed probing parameters: -71 [ 114.336121][ T5920] uclogic 0003:256C:006D.0001: probe with driver uclogic failed with error -71 [ 114.350212][ T5920] usb 3-1: USB disconnect, device number 2 [ 114.547329][ T5926] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 114.634463][ T6055] tmpfs: Bad value for 'mpol' [ 115.519783][ T5926] usb 1-1: device not accepting address 5, error -71 [ 115.716221][ T6059] netlink: 8 bytes leftover after parsing attributes in process `syz.0.31'. [ 115.725597][ T6059] netlink: 4 bytes leftover after parsing attributes in process `syz.0.31'. [ 115.734841][ T6059] netlink: 'syz.0.31': attribute type 6 has an invalid length. [ 117.094131][ T6050] sctp: failed to load transform for md5: -2 [ 117.441514][ T6071] 9pnet_fd: Insufficient options for proto=fd [ 117.537236][ T6071] netlink: 64 bytes leftover after parsing attributes in process `syz.4.33'. [ 132.177003][ C0] sched: DL replenish lagged too much [ 133.126566][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.133552][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.616947][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 258.624066][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P6070/1:b..l P1036/1:b..l P5840/1:b..l P5499/1:b..l P5855/1:b..l [ 258.637014][ C1] rcu: (detected by 1, t=10502 jiffies, g=12761, q=906682 ncpus=2) [ 258.645138][ C1] task:syz-executor state:R running task stack:21080 pid:5855 tgid:5855 ppid:5834 task_flags:0x400140 flags:0x00004002 [ 258.659896][ C1] Call Trace: [ 258.663213][ C1] [ 258.666185][ C1] __schedule+0x16aa/0x4c90 [ 258.670748][ C1] ? preempt_schedule_irq+0xb5/0x150 [ 258.676097][ C1] ? __pfx___schedule+0x10/0x10 [ 258.681002][ C1] ? is_bpf_text_address+0x292/0x2b0 [ 258.686502][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 258.691849][ C1] ? preempt_schedule_irq+0xaa/0x150 [ 258.697195][ C1] preempt_schedule_irq+0xb5/0x150 [ 258.702429][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 258.708212][ C1] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 258.714096][ C1] irqentry_exit+0x6f/0x90 [ 258.718544][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 258.724555][ C1] RIP: 0010:lock_release+0xaa/0x3e0 [ 258.729799][ C1] Code: 92 41 83 bf ec 0a 00 00 00 0f 85 1e 02 00 00 49 81 3e 00 43 60 93 0f 84 11 02 00 00 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 <48> 8b 5c 24 20 fa 48 c7 c7 59 68 99 8d e8 24 58 c8 09 65 ff 05 0d [ 258.749463][ C1] RSP: 0018:ffffc900042bf5c0 EFLAGS: 00000202 [ 258.755580][ C1] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 8b97c40b141e4a00 [ 258.763592][ C1] RDX: 0000000000000000 RSI: ffffffff8be1ba20 RDI: ffffffff8be1b9e0 [ 258.771599][ C1] RBP: ffff88801ce3a4f4 R08: ffff88801ce3a4b7 R09: 1ffff110039c7496 [ 258.779691][ C1] R10: dffffc0000000000 R11: ffffed10039c7497 R12: 000000000004f20d [ 258.787880][ C1] R13: ffffffff82295c1e R14: ffffffff8e13f0e0 R15: ffff88807a358000 [ 258.795904][ C1] ? __update_page_owner_free_handle+0x2e/0x470 [ 258.802296][ C1] ? __update_page_owner_free_handle+0x2e/0x470 [ 258.808592][ C1] __update_page_owner_free_handle+0x452/0x470 [ 258.814796][ C1] ? __update_page_owner_free_handle+0x2e/0x470 [ 258.821454][ C1] __reset_page_owner+0x85/0x1f0 [ 258.826454][ C1] __free_frozen_pages+0xc65/0xe60 [ 258.831626][ C1] __put_partials+0x161/0x1c0 [ 258.836354][ C1] put_cpu_partial+0x17c/0x250 [ 258.841176][ C1] ? put_cpu_partial+0x6d/0x250 [ 258.846095][ C1] __slab_free+0x2f7/0x400 [ 258.850570][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 258.857055][ C1] ? __phys_addr+0xd3/0x180 [ 258.861702][ C1] qlist_free_all+0x97/0x140 [ 258.866436][ C1] kasan_quarantine_reduce+0x148/0x160 [ 258.872042][ C1] __kasan_slab_alloc+0x22/0x80 [ 258.876943][ C1] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 258.882550][ C1] ? alloc_empty_file+0x55/0x1d0 [ 258.887541][ C1] alloc_empty_file+0x55/0x1d0 [ 258.892355][ C1] path_openat+0x107/0x3830 [ 258.897163][ C1] ? arch_stack_walk+0xfc/0x150 [ 258.902099][ C1] ? kasan_save_track+0x4f/0x80 [ 258.906998][ C1] ? kasan_save_track+0x3e/0x80 [ 258.911883][ C1] ? __kasan_slab_alloc+0x6c/0x80 [ 258.916934][ C1] ? getname_flags+0xb8/0x540 [ 258.921650][ C1] ? __pfx_path_openat+0x10/0x10 [ 258.926971][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.933299][ C1] do_filp_open+0x1fa/0x410 [ 258.937860][ C1] ? __lock_acquire+0xab9/0xd20 [ 258.942773][ C1] ? __pfx_do_filp_open+0x10/0x10 [ 258.948039][ C1] ? _raw_spin_unlock+0x28/0x50 [ 258.952932][ C1] ? alloc_fd+0x64c/0x6c0 [ 258.957309][ C1] do_sys_openat2+0x121/0x1c0 [ 258.962021][ C1] ? kmem_cache_free+0x18f/0x400 [ 258.967170][ C1] ? __pfx_do_sys_openat2+0x10/0x10 [ 258.972588][ C1] ? __x64_sys_umount+0x122/0x160 [ 258.977644][ C1] ? __pfx___x64_sys_umount+0x10/0x10 [ 258.983053][ C1] __x64_sys_openat+0x138/0x170 [ 258.987983][ C1] do_syscall_64+0xfa/0x3b0 [ 258.992518][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 258.998292][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.004478][ C1] ? clear_bhb_loop+0x60/0xb0 [ 259.009196][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.015141][ C1] RIP: 0033:0x7f3cc378e4e1 [ 259.019587][ C1] RSP: 002b:00007ffdcc240a50 EFLAGS: 00000287 ORIG_RAX: 0000000000000101 [ 259.028044][ C1] RAX: ffffffffffffffda RBX: 00007f3cc3811c05 RCX: 00007f3cc378e4e1 [ 259.036224][ C1] RDX: 0000000000090800 RSI: 00007ffdcc241c00 RDI: 00000000ffffff9c [ 259.044227][ C1] RBP: 00007ffdcc241bec R08: 0000000000000000 R09: 0000000000000000 [ 259.052318][ C1] R10: 0000000000000000 R11: 0000000000000287 R12: 00007ffdcc241c00 [ 259.060320][ C1] R13: 00007f3cc3811c05 R14: 000000000001be3e R15: 00007ffdcc241c40 [ 259.068342][ C1] [ 259.071486][ C1] task:dhcpcd state:R running task stack:21384 pid:5499 tgid:5499 ppid:5498 task_flags:0x400140 flags:0x00004002 [ 259.085186][ C1] Call Trace: [ 259.088494][ C1] [ 259.091550][ C1] __schedule+0x16aa/0x4c90 [ 259.096115][ C1] ? __lock_acquire+0xab9/0xd20 [ 259.101018][ C1] ? preempt_schedule_irq+0xb5/0x150 [ 259.106377][ C1] ? __pfx___schedule+0x10/0x10 [ 259.111277][ C1] ? __page_table_check_zero+0xba/0x530 [ 259.116961][ C1] ? __page_table_check_zero+0xba/0x530 [ 259.122554][ C1] ? preempt_schedule_irq+0xaa/0x150 [ 259.127890][ C1] preempt_schedule_irq+0xb5/0x150 [ 259.133171][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 259.139079][ C1] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 259.144935][ C1] irqentry_exit+0x6f/0x90 [ 259.149388][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 259.155444][ C1] RIP: 0010:unwind_next_frame+0xcb/0x2390 [ 259.161217][ C1] Code: 00 00 00 00 48 c7 c7 e0 f0 13 8e 31 f6 31 d2 b9 02 00 00 00 45 31 c0 45 31 c9 41 57 e8 3e 8e 2b 00 48 83 c4 08 e8 d5 e4 f3 09 <85> c0 74 3a e8 7c 7f 34 00 84 c0 75 31 e8 c3 e4 f3 09 85 c0 74 28 [ 259.180864][ C1] RSP: 0018:ffffc90003857698 EFLAGS: 00000246 [ 259.187058][ C1] RAX: 0000000000000001 RBX: ffffffff821fdad2 RCX: ffff88802f555a00 [ 259.195063][ C1] RDX: 0000000000000000 RSI: ffffffff8db6fcc6 RDI: ffffffff8be1ba40 [ 259.203108][ C1] RBP: dffffc0000000000 R08: 0000000000000000 R09: ffffffff8172aae5 [ 259.211154][ C1] R10: ffffc900038577b8 R11: ffffffff81acfd40 R12: 1ffff9200070aeed [ 259.219172][ C1] R13: ffffc900038577a0 R14: ffffc90003857768 R15: ffffffff8172aae5 [ 259.227449][ C1] ? unwind_next_frame+0xa5/0x2390 [ 259.232688][ C1] ? __kasan_slab_alloc+0x22/0x80 [ 259.237766][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 259.244581][ C1] ? unwind_next_frame+0xa5/0x2390 [ 259.249845][ C1] ? unwind_next_frame+0xcb/0x2390 [ 259.255202][ C1] ? unwind_next_frame+0xa5/0x2390 [ 259.260365][ C1] ? kasan_quarantine_reduce+0x148/0x160 [ 259.266052][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 259.272252][ C1] arch_stack_walk+0x11c/0x150 [ 259.277083][ C1] ? __kasan_slab_alloc+0x22/0x80 [ 259.282149][ C1] stack_trace_save+0x9c/0xe0 [ 259.286974][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 259.292402][ C1] save_stack+0xf7/0x1f0 [ 259.296702][ C1] ? __pfx_save_stack+0x10/0x10 [ 259.301989][ C1] ? __free_frozen_pages+0xc65/0xe60 [ 259.307491][ C1] ? __put_partials+0x161/0x1c0 [ 259.312723][ C1] ? put_cpu_partial+0x17c/0x250 [ 259.317697][ C1] ? __slab_free+0x2f7/0x400 [ 259.322322][ C1] ? qlist_free_all+0x97/0x140 [ 259.327138][ C1] ? kasan_quarantine_reduce+0x148/0x160 [ 259.332845][ C1] ? __kasan_slab_alloc+0x22/0x80 [ 259.338097][ C1] ? page_ext_put+0x97/0xc0 [ 259.342644][ C1] __reset_page_owner+0x71/0x1f0 [ 259.347712][ C1] __free_frozen_pages+0xc65/0xe60 [ 259.352962][ C1] __put_partials+0x161/0x1c0 [ 259.357709][ C1] put_cpu_partial+0x17c/0x250 [ 259.362619][ C1] ? put_cpu_partial+0x6d/0x250 [ 259.367529][ C1] __slab_free+0x2f7/0x400 [ 259.372175][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 259.378560][ C1] ? __phys_addr+0xd3/0x180 [ 259.383198][ C1] qlist_free_all+0x97/0x140 [ 259.387949][ C1] kasan_quarantine_reduce+0x148/0x160 [ 259.393631][ C1] __kasan_slab_alloc+0x22/0x80 [ 259.398519][ C1] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 259.404014][ C1] ? sk_prot_alloc+0x57/0x220 [ 259.408761][ C1] sk_prot_alloc+0x57/0x220 [ 259.413313][ C1] ? sk_alloc+0x24/0x370 [ 259.417612][ C1] sk_alloc+0x3a/0x370 [ 259.421733][ C1] unix_create1+0xb0/0x7c0 [ 259.426197][ C1] unix_create+0x154/0x200 [ 259.430685][ C1] __sock_create+0x4b0/0x9f0 [ 259.435328][ C1] __sys_socketpair+0x1c5/0x560 [ 259.440402][ C1] __x64_sys_socketpair+0x9b/0xb0 [ 259.445477][ C1] do_syscall_64+0xfa/0x3b0 [ 259.450019][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 259.455344][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.461465][ C1] ? clear_bhb_loop+0x60/0xb0 [ 259.466197][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.472328][ C1] RIP: 0033:0x7f8b095ed73a [ 259.477063][ C1] RSP: 002b:00007ffef83b25b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 259.485795][ C1] RAX: ffffffffffffffda RBX: 00005602c81e8150 RCX: 00007f8b095ed73a [ 259.493980][ C1] RDX: 0000000000000000 RSI: 0000000000080805 RDI: 0000000000000001 [ 259.501991][ C1] RBP: 00007ffef83d29e0 R08: 0000000000000000 R09: 0000000000000001 [ 259.510214][ C1] R10: 00007ffef83b25d0 R11: 0000000000000246 R12: 00007ffef83b25d0 [ 259.518226][ C1] R13: 0000000000000001 R14: 0000000000000000 R15: 00005602c3589ac0 [ 259.526378][ C1] [ 259.529520][ C1] task:syz-executor state:R running task stack:21480 pid:5840 tgid:5840 ppid:1 task_flags:0x40054c flags:0x00004006 [ 259.543248][ C1] Call Trace: [ 259.546565][ C1] [ 259.549537][ C1] __schedule+0x16aa/0x4c90 [ 259.554111][ C1] ? preempt_schedule_common+0x83/0xd0 [ 259.559606][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 259.565722][ C1] ? __pfx___schedule+0x10/0x10 [ 259.570611][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 259.575869][ C1] ? try_to_wake_up+0x7e5/0x1290 [ 259.580863][ C1] ? radix_tree_next_chunk+0x990/0xb60 [ 259.586363][ C1] ? preempt_schedule+0xae/0xc0 [ 259.591286][ C1] preempt_schedule_common+0x83/0xd0 [ 259.596642][ C1] preempt_schedule+0xae/0xc0 [ 259.601421][ C1] ? __pfx_preempt_schedule+0x10/0x10 [ 259.606873][ C1] preempt_schedule_thunk+0x16/0x30 [ 259.612133][ C1] _raw_read_unlock+0x3f/0x50 [ 259.616934][ C1] zap_pid_ns_processes+0x2c4/0x5f0 [ 259.622178][ C1] ? zap_pid_ns_processes+0x129/0x5f0 [ 259.627711][ C1] ? __pfx_zap_pid_ns_processes+0x10/0x10 [ 259.633485][ C1] ? _raw_write_unlock_irq+0x23/0x50 [ 259.638949][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 259.644318][ C1] do_exit+0x1ed2/0x22e0 [ 259.648727][ C1] ? do_raw_spin_lock+0x121/0x290 [ 259.659810][ C1] ? __pfx_do_exit+0x10/0x10 [ 259.664480][ C1] do_group_exit+0x21c/0x2d0 [ 259.669125][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 259.674370][ C1] get_signal+0x125e/0x1310 [ 259.679028][ C1] arch_do_signal_or_restart+0x9a/0x750 [ 259.684622][ C1] ? __pfx___x64_sys_clone+0x10/0x10 [ 259.689954][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 259.696215][ C1] ? exit_to_user_mode_loop+0x40/0x110 [ 259.701722][ C1] exit_to_user_mode_loop+0x75/0x110 [ 259.707177][ C1] do_syscall_64+0x2bd/0x3b0 [ 259.712334][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 259.717632][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.724014][ C1] ? clear_bhb_loop+0x60/0xb0 [ 259.728915][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.734845][ C1] RIP: 0033:0x7f79af185453 [ 259.739494][ C1] RSP: 002b:00007fffa8a50ef8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 259.747964][ C1] RAX: 0000000000000011 RBX: 0000000000000000 RCX: 00007f79af185453 [ 259.756240][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 259.764342][ C1] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000001 [ 259.772437][ C1] R10: 000055558bf2a7d0 R11: 0000000000000246 R12: 0000000000000000 [ 259.780537][ C1] R13: 00000000000927c0 R14: 000000000001c832 R15: 00007fffa8a51090 [ 259.788756][ C1] [ 259.791806][ C1] task:kworker/u8:5 state:R running task stack:23720 pid:1036 tgid:1036 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 259.805570][ C1] Workqueue: events_unbound cfg80211_wiphy_work [ 259.811887][ C1] Call Trace: [ 259.815724][ C1] [ 259.818692][ C1] __schedule+0x16aa/0x4c90 [ 259.823522][ C1] ? preempt_schedule_irq+0xb5/0x150 [ 259.828933][ C1] ? __pfx___schedule+0x10/0x10 [ 259.833839][ C1] ? cfg80211_defragment_element+0xc1/0x330 [ 259.839958][ C1] ? preempt_schedule_irq+0xaa/0x150 [ 259.845393][ C1] preempt_schedule_irq+0xb5/0x150 [ 259.850731][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 259.856697][ C1] ? rhltable_lookup+0x6b1/0x780 [ 259.861689][ C1] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 259.867640][ C1] irqentry_exit+0x6f/0x90 [ 259.872181][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 259.878199][ C1] RIP: 0010:__sanitizer_cov_trace_cmp4+0x83/0x90 [ 259.884585][ C1] Code: 8d 52 28 4d 39 ca 77 22 89 ff 89 f6 49 ff c0 4c 89 01 48 c7 44 11 08 04 00 00 00 48 89 7c 11 10 48 89 74 11 18 48 89 44 11 20 18 3b a9 09 cc 0f 1f 80 00 00 00 00 90 90 90 90 90 90 90 90 90 [ 259.904692][ C1] RSP: 0018:ffffc90003b6f620 EFLAGS: 00000293 [ 259.911001][ C1] RAX: ffffffff8ae8c9cb RBX: 000000000000003c RCX: 0000000000000000 [ 259.919037][ C1] RDX: ffff888026aada00 RSI: 000000000000003c RDI: 0000000000000078 [ 259.927144][ C1] RBP: 0000000000000078 R08: 0000000000000000 R09: 000000000000000c [ 259.935326][ C1] R10: 000000000000000c R11: 0000000000000000 R12: 1ffff1100ad5b61a [ 259.943514][ C1] R13: ffff888054e2a001 R14: 0000000000000004 R15: ffff888056adb0d0 [ 259.951537][ C1] ? ieee80211_sta_get_rates+0x31b/0x5d0 [ 259.957406][ C1] ieee80211_sta_get_rates+0x31b/0x5d0 [ 259.963092][ C1] ieee80211_ibss_rx_queued_mgmt+0x1303/0x2ae0 [ 259.969386][ C1] ? process_scheduled_works+0xade/0x17b0 [ 259.975135][ C1] ? worker_thread+0x8a0/0xda0 [ 259.980285][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 259.985354][ C1] ? ieee80211_ibss_rx_queued_mgmt+0xf93/0x2ae0 [ 259.991815][ C1] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 259.998387][ C1] ? __lock_acquire+0xab9/0xd20 [ 260.003324][ C1] ieee80211_iface_work+0x806/0xfe0 [ 260.008657][ C1] cfg80211_wiphy_work+0x2dc/0x460 [ 260.013940][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 260.019701][ C1] process_scheduled_works+0xade/0x17b0 [ 260.025325][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 260.031357][ C1] worker_thread+0x8a0/0xda0 [ 260.035991][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 260.042470][ C1] ? __kthread_parkme+0x7b/0x200 [ 260.047456][ C1] kthread+0x70e/0x8a0 [ 260.051850][ C1] ? __pfx_worker_thread+0x10/0x10 [ 260.057156][ C1] ? __pfx_kthread+0x10/0x10 [ 260.061796][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 260.067047][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 260.072296][ C1] ? __pfx_kthread+0x10/0x10 [ 260.076964][ C1] ret_from_fork+0x3fc/0x770 [ 260.081596][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 260.086804][ C1] ? __switch_to_asm+0x39/0x70 [ 260.091618][ C1] ? __switch_to_asm+0x33/0x70 [ 260.096448][ C1] ? __pfx_kthread+0x10/0x10 [ 260.101104][ C1] ret_from_fork_asm+0x1a/0x30 [ 260.105947][ C1] [ 260.109018][ C1] task:modprobe state:R running task stack:24104 pid:6070 tgid:6070 ppid:49 task_flags:0x400000 flags:0x00004002 [ 260.122645][ C1] Call Trace: [ 260.126001][ C1] [ 260.128978][ C1] __schedule+0x16aa/0x4c90 [ 260.133539][ C1] ? preempt_schedule_irq+0xb5/0x150 [ 260.138953][ C1] ? kasan_save_stack+0x4d/0x60 [ 260.143845][ C1] ? kasan_record_aux_stack+0xbd/0xd0 [ 260.149293][ C1] ? __pfx___schedule+0x10/0x10 [ 260.154277][ C1] ? mprotect_fixup+0x400/0x9b0 [ 260.159258][ C1] ? __x64_sys_mprotect+0x80/0x90 [ 260.164391][ C1] ? preempt_schedule_irq+0xaa/0x150 [ 260.169716][ C1] preempt_schedule_irq+0xb5/0x150 [ 260.174889][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 260.180676][ C1] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 260.186816][ C1] irqentry_exit+0x6f/0x90 [ 260.191392][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 260.197516][ C1] RIP: 0010:deref_stack_reg+0x1bd/0x230 [ 260.203157][ C1] Code: 30 4c 89 c7 49 89 f7 e8 11 08 00 00 49 89 c6 48 8b 5c 24 18 48 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 e3 3b ad 00 <4c> 89 33 b0 01 eb 02 31 c0 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f [ 260.223075][ C1] RSP: 0018:ffffc90004e16fc0 EFLAGS: 00000246 [ 260.229276][ C1] RAX: 1ffff920009c2e25 RBX: ffffc90004e17128 RCX: 0000000000000001 [ 260.237287][ C1] RDX: ffffc90004e17128 RSI: dffffc0000000000 RDI: ffffc90004e17660 [ 260.245310][ C1] RBP: 1ffff920009c2e1d R08: ffffc90004e17660 R09: 0000000000000000 [ 260.253504][ C1] R10: ffffc90004e17138 R11: fffff520009c2e29 R12: 1ffff920009c2e1e [ 260.261523][ C1] R13: 1ffff920009c2e1f R14: 0000000000000000 R15: dffffc0000000000 [ 260.270007][ C1] unwind_next_frame+0x17c4/0x2390 [ 260.275272][ C1] ? unwind_next_frame+0xa5/0x2390 [ 260.280425][ C1] ? kmem_cache_alloc_bulk_noprof+0x4e0/0x790 [ 260.286795][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 260.293076][ C1] arch_stack_walk+0x11c/0x150 [ 260.298147][ C1] ? mas_alloc_nodes+0x447/0x8e0 [ 260.303329][ C1] stack_trace_save+0x9c/0xe0 [ 260.308065][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 260.313499][ C1] save_stack+0xf7/0x1f0 [ 260.317956][ C1] ? __pfx_save_stack+0x10/0x10 [ 260.322836][ C1] ? __free_frozen_pages+0xc65/0xe60 [ 260.328249][ C1] ? __put_partials+0x161/0x1c0 [ 260.333143][ C1] ? put_cpu_partial+0x17c/0x250 [ 260.338136][ C1] ? __slab_free+0x2f7/0x400 [ 260.342757][ C1] ? qlist_free_all+0x97/0x140 [ 260.347662][ C1] ? kasan_quarantine_reduce+0x148/0x160 [ 260.353427][ C1] ? __kasan_slab_alloc+0x22/0x80 [ 260.358486][ C1] ? kmem_cache_alloc_bulk_noprof+0x4e0/0x790 [ 260.364599][ C1] ? page_ext_put+0x97/0xc0 [ 260.369144][ C1] __reset_page_owner+0x71/0x1f0 [ 260.374134][ C1] __free_frozen_pages+0xc65/0xe60 [ 260.379290][ C1] __put_partials+0x161/0x1c0 [ 260.384019][ C1] put_cpu_partial+0x17c/0x250 [ 260.389174][ C1] ? put_cpu_partial+0x6d/0x250 [ 260.394174][ C1] __slab_free+0x2f7/0x400 [ 260.398810][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 260.404749][ C1] ? __phys_addr+0xd3/0x180 [ 260.409302][ C1] qlist_free_all+0x97/0x140 [ 260.413936][ C1] kasan_quarantine_reduce+0x148/0x160 [ 260.419525][ C1] __kasan_slab_alloc+0x22/0x80 [ 260.424469][ C1] kmem_cache_alloc_bulk_noprof+0x4e0/0x790 [ 260.430591][ C1] ? kmem_cache_alloc_bulk_noprof+0xfa/0x790 [ 260.436628][ C1] ? kmem_cache_alloc_noprof+0x21a/0x3c0 [ 260.442311][ C1] ? mas_alloc_nodes+0x2e9/0x8e0 [ 260.447289][ C1] mas_alloc_nodes+0x447/0x8e0 [ 260.452102][ C1] mas_preallocate+0x3ad/0x6f0 [ 260.456910][ C1] ? __pfx_mas_preallocate+0x10/0x10 [ 260.462233][ C1] ? __mas_set_range+0x12f/0x3c0 [ 260.467223][ C1] __split_vma+0x2fa/0xa00 [ 260.471867][ C1] ? __pfx___split_vma+0x10/0x10 [ 260.477052][ C1] ? smp_call_function_many_cond+0xbc5/0x12d0 [ 260.483160][ C1] ? can_vma_merge_left+0x195/0x6b0 [ 260.488498][ C1] vma_modify+0x13b3/0x1970 [ 260.493074][ C1] vma_modify_flags+0x1e8/0x230 [ 260.498055][ C1] ? __pfx_vma_modify_flags+0x10/0x10 [ 260.503491][ C1] ? mas_next_slot+0xc20/0xcf0 [ 260.508287][ C1] mprotect_fixup+0x400/0x9b0 [ 260.513101][ C1] ? __pfx_mprotect_fixup+0x10/0x10 [ 260.518347][ C1] do_mprotect_pkey+0x8cd/0xce0 [ 260.523512][ C1] ? __pfx_do_mprotect_pkey+0x10/0x10 [ 260.528953][ C1] ? rcu_is_watching+0x15/0xb0 [ 260.533801][ C1] __x64_sys_mprotect+0x80/0x90 [ 260.538907][ C1] do_syscall_64+0xfa/0x3b0 [ 260.543563][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 260.548841][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.554957][ C1] ? clear_bhb_loop+0x60/0xb0 [ 260.559679][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.565605][ C1] RIP: 0033:0x7f28142a72c7 [ 260.570144][ C1] RSP: 002b:00007ffc4aba9f28 EFLAGS: 00000206 ORIG_RAX: 000000000000000a [ 260.578603][ C1] RAX: ffffffffffffffda RBX: 00007f28142bada0 RCX: 00007f28142a72c7 [ 260.586617][ C1] RDX: 0000000000000001 RSI: 0000000000002000 RDI: 00007f28142b8000 [ 260.594708][ C1] RBP: 00007ffc4abaa1f0 R08: 000000003de00ec7 R09: 0000000000000000 [ 260.603086][ C1] R10: 00007f2813febc58 R11: 0000000000000206 R12: fffffffffffffff8 [ 260.611197][ C1] R13: 0000004bff2d7919 R14: 0000000000000000 R15: 00007f28142bb310 [ 260.619227][ C1] [ 260.622285][ C1] rcu: rcu_preempt kthread starved for 10000 jiffies! g12761 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 260.633525][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 260.643539][ C1] rcu: RCU grace-period kthread stack dump: [ 260.649456][ C1] task:rcu_preempt state:R running task stack:26888 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 260.663227][ C1] Call Trace: [ 260.666631][ C1] [ 260.669598][ C1] __schedule+0x16aa/0x4c90 [ 260.674157][ C1] ? schedule+0x165/0x360 [ 260.678525][ C1] ? __pfx___schedule+0x10/0x10 [ 260.683512][ C1] ? schedule+0x91/0x360 [ 260.687794][ C1] schedule+0x165/0x360 [ 260.691992][ C1] schedule_timeout+0x12b/0x270 [ 260.696967][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 260.702378][ C1] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 260.708323][ C1] ? __pfx_process_timeout+0x10/0x10 [ 260.713713][ C1] ? prepare_to_swait_event+0x341/0x380 [ 260.719834][ C1] rcu_gp_fqs_loop+0x301/0x1540 [ 260.724820][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 260.731365][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 260.736685][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 260.742033][ C1] rcu_gp_kthread+0x99/0x390 [ 260.746659][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 260.751985][ C1] ? __kthread_parkme+0x7b/0x200 [ 260.757046][ C1] ? __kthread_parkme+0x1a1/0x200 [ 260.762109][ C1] kthread+0x70e/0x8a0 [ 260.766221][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 260.771450][ C1] ? __pfx_kthread+0x10/0x10 [ 260.776183][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 260.781414][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 260.786655][ C1] ? __pfx_kthread+0x10/0x10 [ 260.791286][ C1] ret_from_fork+0x3fc/0x770 [ 260.795925][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 260.801085][ C1] ? __switch_to_asm+0x39/0x70 [ 260.806062][ C1] ? __switch_to_asm+0x33/0x70 [ 260.810944][ C1] ? __pfx_kthread+0x10/0x10 [ 260.815947][ C1] ret_from_fork_asm+0x1a/0x30 [ 260.820785][ C1] [ 260.823871][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 260.830322][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 260.840076][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 260.850268][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 260.856248][ C1] Code: 53 de 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d d3 ad 21 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 260.876071][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c2 [ 260.882182][ C1] RAX: e7f5c7f16b63aa00 RBX: ffffffff81976918 RCX: e7f5c7f16b63aa00 [ 260.890397][ C1] RDX: 0000000000000001 RSI: ffffffff8d982fba RDI: ffffffff8be1ba40 [ 260.898527][ C1] RBP: ffffc90000197f20 R08: ffff8880b8732f5b R09: 1ffff110170e65eb [ 260.906647][ C1] R10: dffffc0000000000 R11: ffffed10170e65ec R12: ffffffff8fa0b3f0 [ 260.914766][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff11003a57b40 [ 260.922784][ C1] FS: 0000000000000000(0000) GS:ffff888125d57000(0000) knlGS:0000000000000000 [ 260.931928][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 260.938638][ C1] CR2: 00005602c35744b0 CR3: 0000000073d98000 CR4: 00000000003526f0 [ 260.946658][ C1] Call Trace: [ 260.949972][ C1] [ 260.952930][ C1] default_idle+0x13/0x20 [ 260.957421][ C1] default_idle_call+0x74/0xb0 [ 260.962484][ C1] do_idle+0x1e8/0x510 [ 260.966592][ C1] ? __pfx_do_idle+0x10/0x10 [ 260.971302][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 260.976558][ C1] cpu_startup_entry+0x44/0x60 [ 260.981363][ C1] start_secondary+0x101/0x110 [ 260.986165][ C1] common_startup_64+0x13e/0x147 [ 260.991158][ C1] [ 261.308576][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.316397][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.326316][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.333113][ T1301] ieee802154 phy1 wpan1: encryption failed: -22