last executing test programs: 16.735176015s ago: executing program 0 (id=7): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000240)={'wlan1\x00', &(0x7f00000002c0)=@ethtool_stats}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x403, 0x2, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0xe}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x8044) getdents64(0xffffffffffffffff, &(0x7f0000001f00)=""/4111, 0x100f) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(0xffffffffffffffff, 0x28, 0x6, &(0x7f0000000100)={0x0, 0xea60}, 0x10) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2711, @my=0x1}, 0x10) 15.626625184s ago: executing program 0 (id=9): r0 = syz_open_procfs(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, 0x0) r1 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, 0x0, &(0x7f0000000040)='c:::\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) fsopen(&(0x7f00000000c0)='adfs\x00', 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x4, [@ptr={0x0, 0x0, 0x0, 0x2, 0x2}, @typedef={0x7, 0x0, 0x0, 0x8, 0x2}, @type_tag={0x3, 0x0, 0x0, 0x12, 0x1}]}, {0x0, [0x0, 0x30]}}, 0x0, 0x40}, 0x28) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r2, 0x58}, 0x10) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000300)=""/102400, 0x19000) r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000380), 0x121682, 0x0) read$nci(r4, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0e000000040000000400000003"], 0x48) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), 0xffffffffffffffff) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x9, 0xfc}, 0x1c) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000001000000000000e60741000000140018"], 0x30}, 0x1, 0x0, 0x0, 0x41}, 0x0) 14.673560376s ago: executing program 0 (id=11): r0 = socket(0x400000000010, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() shutdown(r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0xdc, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x28, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x8}, [@FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x1000}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x0) eventfd2(0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000540)=@nat={'nat\x00', 0x670, 0x5, 0x418, 0x208, 0x208, 0xffffffff, 0x2b0, 0x168, 0x380, 0x380, 0xffffffff, 0x380, 0x380, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010104, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'wg1\x00', {}, {0xff}, 0x16}, 0x0, 0x130, 0x168, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'kmp\x00', "48ae43e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xf, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @port=0x4e22, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xfffc, 0xd, 0x1}, {0x2, 0x4, 0x3}, 0x1000, 0x100}}}, {{@ip={@multicast2, @broadcast, 0xff, 0x0, 'virt_wifi0\x00', 'batadv_slave_1\x00', {}, {0xff}}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @empty, @icmp_id=0x68, @port=0x4e22}}}}, {{@uncond, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x4, "1542", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @icmp_id, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x478) 13.31779317s ago: executing program 0 (id=13): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b00010000100009045507010349020009"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00N\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) link(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket$qrtr(0x2a, 0x2, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) creat(&(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x40, &(0x7f00000002c0)=ANY=[]) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000001440), 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x2b, 0x1, 0x0) 13.002734837s ago: executing program 4 (id=14): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x1400208bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) socket$packet(0x11, 0x3, 0x300) write(0xffffffffffffffff, &(0x7f0000000000), 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) close(r2) r4 = socket$unix(0x1, 0x5, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x4, 0xa}, {}, {0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8858}, 0x0) 12.775604778s ago: executing program 1 (id=15): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000019300)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102400, 0x19000) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setuid(0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r1, 0x80286722, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x2000c010) socket$nl_netfilter(0x10, 0x3, 0xc) 11.499788012s ago: executing program 4 (id=17): ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x101343) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=@newsa={0x180, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@rand_addr=0x64010102, @in6=@local, 0x1, 0x717, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in=@dev={0xac, 0x14, 0x14, 0x35}, 0x4d4, 0x33}, @in6=@mcast1, {0xfe, 0x1000000000000192, 0xf, 0xcbed, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xff7ffffe, 0x3fc}, 0x7e, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @algo_auth={0x48, 0x1, {{'poly1305-simd\x00'}}}]}, 0x180}, 0x1, 0x0, 0x0, 0x81}, 0x844) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x80, 0x5, 0x7fff0003}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000100)) socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x8004000}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'bridge_slave_1\x00'}) fcntl$lock(0xffffffffffffffff, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000001840)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000580), 0x111, 0x9}}, 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmmsg(r4, 0x0, 0x0, 0x0) 11.404454491s ago: executing program 1 (id=18): r0 = socket$kcm(0x10, 0x3, 0x10) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, 0x0, 0x0) sendmmsg$inet(r3, &(0x7f0000004980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20008000) setsockopt$inet_tcp_TLS_TX(r3, 0x6, 0x25, &(0x7f0000000a80)=@gcm_128={{0x303}, "9ff3d6661480294c", "5fa3c0bf46782bbee21b09b7446edc75", "5bee93e1", "f11bb8cba3046ce3"}, 0x28) socket$key(0xf, 0x3, 0x2) sendmsg$unix(0xffffffffffffffff, 0x0, 0x240408c1) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40002001, 0x0) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x98) r4 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x20101) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r4, 0xc2604110, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000040)={0x28, 0x7, 0x0, 0x0, &(0x7f000004c000/0x1000)=nil, 0x1000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000440)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, r5, 0x0, 0x10001, 0x0, 0xfffffffd, 0x7eac0, 0x3d3b4e}) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030029000b12d25a80648c2594f90224fc60100c02", 0x17}], 0x1}, 0x0) 10.649091841s ago: executing program 2 (id=19): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x800) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x6000, @fd=r4, 0xffffffffffffffff, &(0x7f00000006c0)=""/210, 0xd2, 0x2, 0x1}) io_uring_enter(r0, 0x627, 0x4c1, 0x43, 0x0, 0x30) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000000300)=""/102400, 0x19000) 10.336791048s ago: executing program 1 (id=20): openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) syz_io_uring_setup(0xb, &(0x7f0000000240)={0x0, 0x6109, 0x800, 0x0, 0x1a2}, &(0x7f0000000100), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000001c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) sendmsg$RDMA_NLDEV_CMD_RES_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000000914e7"], 0x30}, 0x1, 0x0, 0x0, 0xbe9b70533f4d9e1}, 0x0) 10.107171282s ago: executing program 1 (id=21): r0 = socket(0x400000000010, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) shutdown(r0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0xdc, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010001, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) eventfd2(0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000540)=@nat={'nat\x00', 0x670, 0x5, 0x418, 0x208, 0x208, 0xffffffff, 0x2b0, 0x168, 0x380, 0x380, 0xffffffff, 0x380, 0x380, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010104, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'wg1\x00', {}, {0xff}, 0x16}, 0x0, 0x130, 0x168, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'kmp\x00', "48ae43e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xf, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @port=0x4e22, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xfffc, 0xd, 0x1}, {0x2, 0x4, 0x3}, 0x1000, 0x100}}}, {{@ip={@multicast2, @broadcast, 0xff, 0x0, 'virt_wifi0\x00', 'batadv_slave_1\x00', {}, {0xff}}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @empty, @icmp_id=0x68, @port=0x4e22}}}}, {{@uncond, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x4, "1542", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @icmp_id, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x478) 10.090250569s ago: executing program 4 (id=22): socket(0x400000000010, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0xdc, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x28, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x8}, [@FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x1000}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x0) eventfd2(0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000540)=@nat={'nat\x00', 0x670, 0x5, 0x418, 0x208, 0x208, 0xffffffff, 0x2b0, 0x168, 0x380, 0x380, 0xffffffff, 0x380, 0x380, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010104, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'wg1\x00', {}, {0xff}, 0x16}, 0x0, 0x130, 0x168, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'kmp\x00', "48ae43e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xf, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @port=0x4e22, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xfffc, 0xd, 0x1}, {0x2, 0x4, 0x3}, 0x1000, 0x100}}}, {{@ip={@multicast2, @broadcast, 0xff, 0x0, 'virt_wifi0\x00', 'batadv_slave_1\x00', {}, {0xff}}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @empty, @icmp_id=0x68, @port=0x4e22}}}}, {{@uncond, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x4, "1542", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @icmp_id, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x478) 8.438707881s ago: executing program 4 (id=23): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000019300)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102400, 0x19000) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) setuid(0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r1, 0x80286722, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x2000c010) socket$nl_netfilter(0x10, 0x3, 0xc) 7.804768524s ago: executing program 1 (id=24): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x1400208bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) socket$packet(0x11, 0x3, 0x300) write(0xffffffffffffffff, &(0x7f0000000000), 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) close(r2) r4 = socket$unix(0x1, 0x5, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x4, 0xa}, {}, {0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_CLASSID={0x8, 0x3, {0x1, 0xb}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8858}, 0x0) 7.698187245s ago: executing program 3 (id=25): bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000000000000000008a14754b0000", @ANYRES32=0x0, @ANYRES32], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000780)=ANY=[@ANYBLOB="18020000070000e6ffffff000080000085000000750900009500000006000000dfb6bcf77baf21e93841ac7945a0dc131372df7c682db2"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="14000000000000002900000000000014000000000000002900000034000000fdffffff00000000180000000000000029000000040000000400000000000000d80000000000000029000000360000005e17000000000000000100000100010800000000000000000728000000030800ff0f660900000000000007000000000000000100"], 0x188}}], 0x1, 0x810) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f", 0xcd}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 7.62877698s ago: executing program 0 (id=26): socket(0x400000000010, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0xdc, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x28, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x8}, [@FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x1000}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000540)=@nat={'nat\x00', 0x670, 0x5, 0x418, 0x208, 0x208, 0xffffffff, 0x2b0, 0x168, 0x380, 0x380, 0xffffffff, 0x380, 0x380, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010104, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'wg1\x00', {}, {0xff}, 0x16}, 0x0, 0x130, 0x168, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'kmp\x00', "48ae43e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xf, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @port=0x4e22, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xfffc, 0xd, 0x1}, {0x2, 0x4, 0x3}, 0x1000, 0x100}}}, {{@ip={@multicast2, @broadcast, 0xff, 0x0, 'virt_wifi0\x00', 'batadv_slave_1\x00', {}, {0xff}}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @empty, @icmp_id=0x68, @port=0x4e22}}}}, {{@uncond, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x4, "1542", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @icmp_id, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x478) 7.424268052s ago: executing program 3 (id=27): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4600, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, &(0x7f0000000880)={0x0, 0x2, 0x1, [0x1, 0xeb5b, 0x6, 0x3, 0x100000000], [0x1, 0x3, 0x4, 0x2ca, 0x4, 0x200, 0x5, 0x5631, 0x7, 0x5, 0xfffffffffffffff7, 0xaf, 0x100000001, 0x7, 0x6e0, 0x86e, 0x2, 0x4, 0x1, 0x2, 0xfffffffffffffff7, 0x7c, 0x8, 0x4, 0x8, 0x157b84ad, 0x0, 0xa, 0x80000001, 0x9, 0x10001, 0xfffffffffffffff9, 0x5, 0x3, 0x1, 0x1, 0x1001, 0x1, 0x4, 0x3, 0x8, 0x7, 0xb, 0x3, 0x0, 0x9, 0x10000, 0x1000, 0x2, 0x8, 0x64, 0x280000000000, 0x2, 0x4, 0x7, 0xa, 0x3, 0x8, 0x2, 0x0, 0xa0000000000, 0xfffffffffffffff5, 0x7, 0x3, 0x176, 0x15f, 0x0, 0x5, 0x5, 0xfc72, 0x9, 0x7, 0x7, 0x2, 0x6, 0x81, 0x2, 0x4, 0x10000000100, 0x0, 0x9, 0x2ce1, 0x7f, 0x8, 0xeab5, 0xffffffffffffffff, 0xeffffffffffffffe, 0x6, 0x10001, 0x2b6, 0x1, 0x2e06ffea, 0x10001, 0xf2d5, 0xffffffffffffffff, 0x2b6b, 0x1, 0x4, 0x5ac, 0x7f95, 0x20000d13, 0x2c, 0x1ff, 0x1000, 0xd05, 0x1, 0x9e, 0x8000000000000000, 0x3, 0x0, 0x3, 0x5, 0xc, 0x6, 0x6281, 0x10, 0x7f, 0x7, 0x3, 0x3, 0x7]}) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBSENT(r3, 0x4b49, 0xfffffffffffffffd) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) fchmodat(r4, &(0x7f0000000180)='./file0\x00', 0x22) r5 = syz_open_dev$loop(&(0x7f0000000240), 0x6, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000000280)={r6, 0x0, {0x0, 0x0, 0x0, 0x32, 0x4000000000001001, 0x0, 0x0, 0x1c, 0xc, "faf98317e5a1149989fc8dbe53ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a8a0f3500000000000000000e00", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0x3, 0x6]}}) ioctl$SNDCTL_DSP_GETODELAY(r6, 0x80045017, &(0x7f0000000100)) pipe2$9p(0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0xdc}}, 0x0) prctl$PR_GET_TSC(0x43, 0x0) sendmsg$NFT_MSG_GETRULE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000190a0102"], 0x14}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newtaction={0x6c, 0x30, 0xb, 0x80000, 0x40, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x6b}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 5.661467352s ago: executing program 1 (id=28): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) r6 = accept4(r5, 0x0, 0x0, 0x800) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x6000, @fd=r6, 0xffffffffffffffff, &(0x7f00000006c0)=""/210, 0xd2, 0x2, 0x1}) io_uring_enter(r2, 0x627, 0x4c1, 0x43, 0x0, 0x30) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000000300)=""/102400, 0x19000) 5.236967541s ago: executing program 2 (id=29): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'caif0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c00"], 0x48}}, 0x0) socket(0x10, 0x3, 0x0) r2 = socket(0x11, 0xa, 0x5) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) r3 = gettid() sched_setaffinity(r3, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f00000004c0)={'filter\x00', 0x7, 0x4, 0x3f0, 0x110, 0x0, 0x1f8, 0x308, 0x308, 0x308, 0x4, &(0x7f0000000100), {[{{@arp={@broadcast, @empty, 0xff000000, 0xffffff00, 0x4, 0x6, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}, {[0x0, 0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x45e, 0xf, 0x1, 0xd8f, 0xf23, 0x2, 'geneve1\x00', 'veth1_virt_wifi\x00', {}, {0xff}, 0x0, 0x42}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @empty, @rand_addr=0x64010101, @multicast2, 0x4}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@arp={@broadcast, @local, 0xff000000, 0xffffffff, 0xe, 0x9, {@empty, {[0x0, 0xff, 0x0, 0xff]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}, {[0x0, 0xff, 0xff, 0xff]}}, 0x2, 0x6, 0x2, 0x100, 0x3, 0x1, 'dvmrp1\x00', 'team_slave_0\x00', {0xff}, {}, 0x0, 0x100}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xf, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0x18880, 0x0) preadv(r5, &(0x7f0000000b00), 0x0, 0x1001000, 0x3) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x2c}, 0x10) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r6, 0x40000000af01, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f0000000280)={0x1, 0x0, [{0x25000, 0x1000, &(0x7f0000000900)=""/4096}]}) ioctl$BTRFS_IOC_LOGICAL_INO(r7, 0xc0389424, &(0x7f0000000380)={0x1796, 0x28, '\x00', 0x0, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0]}) r8 = dup(r7) ioctl$VHOST_NET_SET_BACKEND(r6, 0x4008af30, &(0x7f0000000000)={0x1, r8}) close(r6) 4.452026974s ago: executing program 3 (id=30): socket$packet(0x11, 0x3, 0x300) socket$netlink(0x10, 0x3, 0x4) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001000), 0x109400) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f00000010c0)={0xfffffffe, 0x2, 'client1\x00', 0x6, "422e9d6523856127", "07c9e8028cd1f0394efed50c2c8fd304183134b004670d4b3355b33600bfb6c0", 0x4, 0x1}) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000a00)=@filter={'filter\x00', 0x42, 0x4, 0x478, 0xffffffff, 0x1c0, 0x100, 0x1c0, 0xffffffff, 0xffffffff, 0x3e0, 0x3e0, 0x3e0, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @loopback, 0xffffff00, 0x0, 'veth0_to_batadv\x00', 'pimreg0\x00', {}, {}, 0x11, 0x1}, 0x0, 0xd8, 0x100, 0x0, {0x100000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0xf}}, @common=@unspec=@connbytes={{0x38}, {[{0x6}, {0x1}], 0x2}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0xff, 0xfff8}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@state={{0x28}, {0x7}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ip={@multicast2, @private=0xa010102, 0x0, 0x0, 'veth1_virt_wifi\x00', '\x00', {}, {}, 0x6, 0x1, 0x4}, 0x0, 0x1e0, 0x220, 0x0, {}, [@common=@unspec=@connlabel={{0x28}, {0xf, 0x2}}, @common=@inet=@sctp={{0x148}, {[0x4e23, 0x4e24], [0x4e20, 0x4e20], [0x0, 0x65, 0x3, 0xffff, 0x9, 0x8000, 0x800, 0x0, 0xfffffc00, 0x1a, 0x8, 0x2, 0x6, 0x8, 0x1, 0x4, 0x895, 0x1, 0x7, 0x8001, 0x4, 0x3, 0x7, 0x23b, 0x7fff, 0x2400, 0x10, 0x5, 0x7ff, 0xee, 0x7, 0x4, 0x6, 0x7, 0x1087, 0x3, 0x39d, 0xffffffff, 0x4, 0x5, 0x1, 0x0, 0x4, 0x200, 0x0, 0x5, 0xe6, 0x1, 0xffff, 0x1, 0x401, 0x7, 0x4, 0x1, 0x1, 0x76b, 0x8, 0x401, 0xa71c, 0x4000000, 0x8, 0x0, 0x1ff, 0x9], 0x1, [{0xfc, 0x1}, {0x8, 0x9, 0x29}, {0x2, 0x81, 0x7}, {0x8, 0x7}], 0x0, 0x1, 0x7}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4d8) open(&(0x7f0000000000)='./file0\x00', 0x840, 0x18b) open(&(0x7f00000000c0)='./file0\x00', 0x9c41, 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0xe8c40, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x54, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, r3, 0x800, 0x55007}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x24, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x2}, @IFLA_BR_MCAST_STARTUP_QUERY_INTVL={0xc, 0x23, 0x1}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0x6}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000002010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c0010800800014000000000d97405010000000008000240000000000800", @ANYRES64], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) 3.911054776s ago: executing program 2 (id=31): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4600, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, &(0x7f0000000880)={0x0, 0x2, 0x1, [0x1, 0xeb5b, 0x6, 0x3, 0x100000000], [0x1, 0x3, 0x4, 0x2ca, 0x4, 0x200, 0x5, 0x5631, 0x7, 0x5, 0xfffffffffffffff7, 0xaf, 0x100000001, 0x7, 0x6e0, 0x86e, 0x2, 0x4, 0x1, 0x2, 0xfffffffffffffff7, 0x7c, 0x8, 0x4, 0x8, 0x157b84ad, 0x0, 0xa, 0x80000001, 0x9, 0x10001, 0xfffffffffffffff9, 0x5, 0x3, 0x1, 0x1, 0x1001, 0x1, 0x4, 0x3, 0x8, 0x7, 0xb, 0x3, 0x0, 0x9, 0x10000, 0x1000, 0x2, 0x8, 0x64, 0x280000000000, 0x2, 0x4, 0x7, 0xa, 0x3, 0x8, 0x2, 0x0, 0xa0000000000, 0xfffffffffffffff5, 0x7, 0x3, 0x176, 0x15f, 0x0, 0x5, 0x5, 0xfc72, 0x9, 0x7, 0x7, 0x2, 0x6, 0x81, 0x2, 0x4, 0x10000000100, 0x0, 0x9, 0x2ce1, 0x7f, 0x8, 0xeab5, 0xffffffffffffffff, 0xeffffffffffffffe, 0x6, 0x10001, 0x2b6, 0x1, 0x2e06ffea, 0x10001, 0xf2d5, 0xffffffffffffffff, 0x2b6b, 0x1, 0x4, 0x5ac, 0x7f95, 0x20000d13, 0x2c, 0x1ff, 0x1000, 0xd05, 0x1, 0x9e, 0x8000000000000000, 0x3, 0x0, 0x3, 0x5, 0xc, 0x6, 0x6281, 0x10, 0x7f, 0x7, 0x3, 0x3, 0x7]}) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSKBSENT(r3, 0x4b49, 0xfffffffffffffffd) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) fchmodat(r4, &(0x7f0000000180)='./file0\x00', 0x22) r5 = syz_open_dev$loop(&(0x7f0000000240), 0x6, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000000280)={r6, 0x0, {0x0, 0x0, 0x0, 0x32, 0x4000000000001001, 0x0, 0x0, 0x1c, 0xc, "faf98317e5a1149989fc8dbe53ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a8a0f3500000000000000000e00", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0x3, 0x6]}}) ioctl$SNDCTL_DSP_GETODELAY(r6, 0x80045017, &(0x7f0000000100)) pipe2$9p(0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0xdc}}, 0x0) prctl$PR_GET_TSC(0x43, 0x0) sendmsg$NFT_MSG_GETRULE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000190a0102"], 0x14}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newtaction={0x6c, 0x30, 0xb, 0x80000, 0x40, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x6b}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 3.40613579s ago: executing program 4 (id=32): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000001000390400000000fedbdf250000", @ANYRES32=r3, @ANYBLOB="01982400419a0440"], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x0) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xa) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000300)={{{@in=@initdev, @in6=@local}}, {{@in6=@empty}, 0x0, @in=@broadcast}}, &(0x7f0000000280)=0xe8) getresuid(&(0x7f0000000400), 0x0, &(0x7f0000000480)) sendmsg$nl_generic(r2, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc2604110, &(0x7f0000000040)={0x0, [[0x9ef8, 0x9, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7fffffff], [0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x200], [0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]], '\x00', [{}, {0xfffffffd}, {0x200}, {0x1, 0xfffffffc, 0x0, 0x1, 0x1}, {0x80000009, 0x0, 0x0, 0x1, 0x1}, {0x7fff, 0xfffffffa}, {}, {0x8000000, 0x8f96}, {}, {0x0, 0x1}, {}, {0x8}], '\x00', 0x1000}) write$binfmt_elf64(r0, &(0x7f0000002600)=ANY=[], 0x1820) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x7, 0x5], &(0x7f0000000240), 0x0, 0x12}}, 0x40) 2.518912888s ago: executing program 3 (id=33): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) r3 = socket(0x2, 0x80805, 0x0) io_setup(0x2278, &(0x7f0000000180)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_submit(r4, 0x2, &(0x7f0000000140)=[&(0x7f00000001c0)={0x0, 0x4, 0x0, 0x0, 0x0, r6, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x5, 0x2, r5, 0x0, 0x0, 0x0, 0x0, 0x2}]) sendmmsg$inet(r3, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x1}], 0x1}}], 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r7 = syz_open_dev$sndctrl(&(0x7f0000000400), 0x0, 0x8080) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r7, 0xc1105517, &(0x7f0000000500)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x7}, 0x3, 0x20, 0x5, 0x0, 0x2, 0x400, 'syz1\x00', &(0x7f0000000700)=[':#,\x00', '\\\x00'], 0x6}) r8 = open(&(0x7f00000001c0)='./file1\x00', 0x14da7e, 0x20) ioctl$FS_IOC_SETFLAGS(r8, 0x40086602, &(0x7f0000000240)=0x10) r9 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4048aecb, &(0x7f0000000280)={0x3, 0x0, [{0x40000000, 0x6, 0x4, 0x5, 0xffffffff, 0xfffff5f7, 0x7}, {0x80000019, 0x403, 0x2, 0x1, 0x10002, 0x0, 0x7}, {0x40000000, 0x170f, 0x0, 0x4, 0xfffffff1, 0xfc, 0x4}]}) 2.424737601s ago: executing program 0 (id=34): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000001c0)="c744240077dd0000c74424027fbe0000c7442406000000000f011c24b8010000000f01c1450f01ca470f01f866baf80cb8e4f61882ef66bafc0c66b8795966ef40250000000066b8de000f00d02e0f005ffa0f01c92e640fc71f", 0x5a}], 0x1, 0x8c, 0x0, 0x0) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x4ae60) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) r7 = accept4(r6, 0x0, 0x0, 0x800) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x6000, @fd=r7, 0xffffffffffffffff, &(0x7f00000006c0)=""/210, 0xd2, 0x2, 0x1}) io_uring_enter(r3, 0x627, 0x4c1, 0x43, 0x0, 0x30) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000000300)=""/102400, 0x19000) 2.138280398s ago: executing program 4 (id=35): bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_usb_connect$uac2(0x5, 0x83, &(0x7f0000000080)=ANY=[@ANYBLOB="12011003000000404e150e50400001020301090271000301093009080b00010107208c09040000000101200009240100400411000708240a0001aa0302"], 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x40) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r3, 0x3b82, &(0x7f0000000180)={0x18, r4, 0x1, 0x0, &(0x7f0000000140)=[{0x0, 0x1000}]}) 1.440230234s ago: executing program 2 (id=36): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'caif0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c00"], 0x48}}, 0x0) socket(0x10, 0x3, 0x0) r2 = socket(0x11, 0xa, 0x5) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) r3 = gettid() sched_setaffinity(r3, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f00000004c0)={'filter\x00', 0x7, 0x4, 0x3f0, 0x110, 0x0, 0x1f8, 0x308, 0x308, 0x308, 0x4, &(0x7f0000000100), {[{{@arp={@broadcast, @empty, 0xff000000, 0xffffff00, 0x4, 0x6, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}, {[0x0, 0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x45e, 0xf, 0x1, 0xd8f, 0xf23, 0x2, 'geneve1\x00', 'veth1_virt_wifi\x00', {}, {0xff}, 0x0, 0x42}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @empty, @rand_addr=0x64010101, @multicast2, 0x4}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@arp={@broadcast, @local, 0xff000000, 0xffffffff, 0xe, 0x9, {@empty, {[0x0, 0xff, 0x0, 0xff]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}, {[0x0, 0xff, 0xff, 0xff]}}, 0x2, 0x6, 0x2, 0x100, 0x3, 0x1, 'dvmrp1\x00', 'team_slave_0\x00', {0xff}, {}, 0x0, 0x100}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xf, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0x18880, 0x0) preadv(r5, &(0x7f0000000b00), 0x0, 0x1001000, 0x3) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x2c}, 0x10) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r6, 0x40000000af01, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f0000000280)={0x1, 0x0, [{0x25000, 0x1000, &(0x7f0000000900)=""/4096}]}) ioctl$BTRFS_IOC_LOGICAL_INO(r7, 0xc0389424, &(0x7f0000000380)={0x1796, 0x28, '\x00', 0x0, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0]}) r8 = dup(r7) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f00000002c0)={0x1, 0x1, 0x0, &(0x7f00000003c0)=""/234, 0x0, 0xe000}) ioctl$VHOST_NET_SET_BACKEND(r6, 0x4008af30, &(0x7f0000000000)={0x1, r8}) 698.521115ms ago: executing program 3 (id=37): bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000000000000000008a14754b0000", @ANYRES32=0x0, @ANYRES32], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000780)=ANY=[@ANYBLOB="18020000070000e6ffffff000080000085000000750900009500000006000000dfb6bcf77baf21e93841ac7945a0dc131372df7c682db2"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="14000000000000002900000000000014000000000000002900000034000000fdffffff00000000180000000000000029000000040000000400000000000000d80000000000000029000000360000005e17000000000000000100000100010800000000000000000728000000030800ff0f660900000000000007000000000000000100"], 0x188}}], 0x1, 0x810) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 371.320212ms ago: executing program 3 (id=38): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'caif0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c00"], 0x48}}, 0x0) socket(0x10, 0x3, 0x0) r2 = socket(0x11, 0xa, 0x5) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) r3 = gettid() sched_setaffinity(r3, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f00000004c0)={'filter\x00', 0x7, 0x4, 0x3f0, 0x110, 0x0, 0x1f8, 0x308, 0x308, 0x308, 0x4, &(0x7f0000000100), {[{{@arp={@broadcast, @empty, 0xff000000, 0xffffff00, 0x4, 0x6, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}, {[0x0, 0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x45e, 0xf, 0x1, 0xd8f, 0xf23, 0x2, 'geneve1\x00', 'veth1_virt_wifi\x00', {}, {0xff}, 0x0, 0x42}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @empty, @rand_addr=0x64010101, @multicast2, 0x4}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@arp={@broadcast, @local, 0xff000000, 0xffffffff, 0xe, 0x9, {@empty, {[0x0, 0xff, 0x0, 0xff]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}, {[0x0, 0xff, 0xff, 0xff]}}, 0x2, 0x6, 0x2, 0x100, 0x3, 0x1, 'dvmrp1\x00', 'team_slave_0\x00', {0xff}, {}, 0x0, 0x100}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xf, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0x18880, 0x0) preadv(r5, &(0x7f0000000b00), 0x0, 0x1001000, 0x3) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x2c}, 0x10) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r6, 0x40000000af01, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f0000000280)={0x1, 0x0, [{0x25000, 0x1000, &(0x7f0000000900)=""/4096}]}) ioctl$BTRFS_IOC_LOGICAL_INO(r7, 0xc0389424, &(0x7f0000000380)={0x1796, 0x28, '\x00', 0x0, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0]}) dup(r7) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f00000002c0)={0x1, 0x1, 0x0, &(0x7f00000003c0)=""/234, 0x0, 0xe000}) close(r6) 363.850091ms ago: executing program 2 (id=39): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x22020600) r1 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfec9}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_UNLINKAT={0x24, 0x8, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0xc2e999eabd050ec2}) io_uring_enter(r1, 0xdb4, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 2 (id=40): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) writev(0xffffffffffffffff, &(0x7f00000005c0)=[{0x0}], 0x1) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) r5 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(0x0, 0x111) close(r5) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0xe) close_range(r2, r3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000007500)={0x30, 0x3e, 0x107, 0x70bd2b, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xf, 0x1, 0x0, 0x1, [@generic="6d14314965356ee88bd200"]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x33}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.154' (ED25519) to the list of known hosts. [ 65.280852][ T5825] cgroup: Unknown subsys name 'net' [ 65.390149][ T5825] cgroup: Unknown subsys name 'cpuset' [ 65.398662][ T5825] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 66.784868][ T5825] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 69.111747][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 69.124807][ T5848] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 69.133467][ T5848] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 69.143289][ T5854] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 69.151781][ T5850] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 69.160152][ T5848] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 69.161284][ T5850] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 69.168862][ T5848] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 69.176787][ T5850] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 69.182987][ T5848] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 69.192303][ T5850] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 69.204697][ T5850] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 69.205832][ T5848] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 69.214215][ T5850] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 69.222265][ T5848] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 69.235130][ T5848] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 69.246378][ T5848] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 69.246671][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 69.268400][ T5850] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 69.276846][ T5848] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 69.279346][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 69.292343][ T5850] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 69.299882][ T5850] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 69.300647][ T5848] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 69.318180][ T5162] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 69.901562][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 69.923247][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 70.057490][ T5844] chnl_net:caif_netlink_parms(): no params data found [ 70.159506][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.167591][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.175733][ T5837] bridge_slave_0: entered allmulticast mode [ 70.183961][ T5837] bridge_slave_0: entered promiscuous mode [ 70.228034][ T5853] chnl_net:caif_netlink_parms(): no params data found [ 70.241077][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.248479][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.255868][ T5837] bridge_slave_1: entered allmulticast mode [ 70.263293][ T5837] bridge_slave_1: entered promiscuous mode [ 70.328623][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.336125][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.343375][ T5839] bridge_slave_0: entered allmulticast mode [ 70.350893][ T5839] bridge_slave_0: entered promiscuous mode [ 70.358479][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 70.411294][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.419368][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.426741][ T5839] bridge_slave_1: entered allmulticast mode [ 70.433989][ T5839] bridge_slave_1: entered promiscuous mode [ 70.472233][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.507854][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.515199][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.522399][ T5844] bridge_slave_0: entered allmulticast mode [ 70.530742][ T5844] bridge_slave_0: entered promiscuous mode [ 70.541915][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.578801][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.586137][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.593338][ T5844] bridge_slave_1: entered allmulticast mode [ 70.601167][ T5844] bridge_slave_1: entered promiscuous mode [ 70.622265][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.666458][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.706856][ T5837] team0: Port device team_slave_0 added [ 70.744239][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.756504][ T5837] team0: Port device team_slave_1 added [ 70.783396][ T5853] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.790711][ T5853] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.798124][ T5853] bridge_slave_0: entered allmulticast mode [ 70.805620][ T5853] bridge_slave_0: entered promiscuous mode [ 70.820547][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.843671][ T5839] team0: Port device team_slave_0 added [ 70.861261][ T5853] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.868682][ T5853] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.875959][ T5853] bridge_slave_1: entered allmulticast mode [ 70.883210][ T5853] bridge_slave_1: entered promiscuous mode [ 70.916063][ T5839] team0: Port device team_slave_1 added [ 70.921963][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.929235][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.936591][ T5838] bridge_slave_0: entered allmulticast mode [ 70.943927][ T5838] bridge_slave_0: entered promiscuous mode [ 70.975284][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.982265][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.009088][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.031982][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.039313][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.046800][ T5838] bridge_slave_1: entered allmulticast mode [ 71.054075][ T5838] bridge_slave_1: entered promiscuous mode [ 71.073443][ T5844] team0: Port device team_slave_0 added [ 71.083229][ T5844] team0: Port device team_slave_1 added [ 71.090943][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.098079][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.124655][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.160896][ T5853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.191686][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.198680][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.224609][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.253137][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.255152][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.260140][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.273481][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.289884][ T5853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.311402][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.319408][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.319493][ T5162] Bluetooth: hci3: command tx timeout [ 71.345681][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.363364][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.370912][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.396968][ T5162] Bluetooth: hci4: command tx timeout [ 71.397179][ T5162] Bluetooth: hci2: command tx timeout [ 71.403359][ T5854] Bluetooth: hci0: command tx timeout [ 71.410012][ T5162] Bluetooth: hci1: command tx timeout [ 71.415256][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.463833][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.470891][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.496966][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.560127][ T5838] team0: Port device team_slave_0 added [ 71.568376][ T5853] team0: Port device team_slave_0 added [ 71.580803][ T5837] hsr_slave_0: entered promiscuous mode [ 71.587471][ T5837] hsr_slave_1: entered promiscuous mode [ 71.610015][ T5838] team0: Port device team_slave_1 added [ 71.618275][ T5853] team0: Port device team_slave_1 added [ 71.708381][ T5839] hsr_slave_0: entered promiscuous mode [ 71.715180][ T5839] hsr_slave_1: entered promiscuous mode [ 71.722185][ T5839] debugfs: 'hsr0' already exists in 'hsr' [ 71.728168][ T5839] Cannot create hsr debugfs directory [ 71.745211][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.752179][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.778232][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.790944][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.798020][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.824001][ T5853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.841732][ T5844] hsr_slave_0: entered promiscuous mode [ 71.848586][ T5844] hsr_slave_1: entered promiscuous mode [ 71.855101][ T5844] debugfs: 'hsr0' already exists in 'hsr' [ 71.860833][ T5844] Cannot create hsr debugfs directory [ 71.877763][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.884917][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.911686][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.931181][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.938200][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.964345][ T5853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.091526][ T5838] hsr_slave_0: entered promiscuous mode [ 72.099161][ T5838] hsr_slave_1: entered promiscuous mode [ 72.105900][ T5838] debugfs: 'hsr0' already exists in 'hsr' [ 72.111659][ T5838] Cannot create hsr debugfs directory [ 72.168179][ T5853] hsr_slave_0: entered promiscuous mode [ 72.175283][ T5853] hsr_slave_1: entered promiscuous mode [ 72.182002][ T5853] debugfs: 'hsr0' already exists in 'hsr' [ 72.187809][ T5853] Cannot create hsr debugfs directory [ 72.709299][ T5837] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 72.722933][ T5837] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 72.734192][ T5837] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 72.753730][ T5837] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 72.812158][ T5839] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 72.832239][ T5839] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 72.842825][ T5839] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 72.872374][ T5839] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 72.962977][ T5838] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 72.973467][ T5838] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 72.985286][ T5838] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 73.009066][ T5838] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 73.131127][ T5853] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 73.151436][ T5853] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 73.177233][ T5853] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 73.204379][ T5853] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 73.247272][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.316366][ T5844] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 73.327142][ T5844] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 73.344676][ T5844] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 73.358134][ T5844] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 73.395475][ T5162] Bluetooth: hci3: command tx timeout [ 73.417304][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.446429][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.474877][ T5162] Bluetooth: hci0: command tx timeout [ 73.474957][ T5854] Bluetooth: hci2: command tx timeout [ 73.484990][ T5162] Bluetooth: hci1: command tx timeout [ 73.485797][ T5848] Bluetooth: hci4: command tx timeout [ 73.502845][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.510328][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.548377][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.555557][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.604457][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.621244][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.642318][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.649460][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.694232][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.701423][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.739788][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.773110][ T1120] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.780258][ T1120] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.851063][ T1120] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.858310][ T1120] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.892120][ T5853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.001185][ T5853] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.043593][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.050825][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.084699][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.091975][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.142543][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.221521][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.301516][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.363034][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.370242][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.396899][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.404011][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.422509][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.526555][ T5837] veth0_vlan: entered promiscuous mode [ 74.571773][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.623177][ T5837] veth1_vlan: entered promiscuous mode [ 74.788643][ T5837] veth0_macvtap: entered promiscuous mode [ 74.798877][ T5839] veth0_vlan: entered promiscuous mode [ 74.821995][ T5837] veth1_macvtap: entered promiscuous mode [ 74.860932][ T5839] veth1_vlan: entered promiscuous mode [ 74.884455][ T5853] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.954309][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.997175][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.049641][ T49] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.060913][ T49] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.091465][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.102188][ T49] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.111264][ T49] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.130088][ T5839] veth0_macvtap: entered promiscuous mode [ 75.173342][ T5839] veth1_macvtap: entered promiscuous mode [ 75.284102][ T5838] veth0_vlan: entered promiscuous mode [ 75.324716][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.328193][ T5853] veth0_vlan: entered promiscuous mode [ 75.335315][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.359992][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.388457][ T5838] veth1_vlan: entered promiscuous mode [ 75.412427][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.424796][ T5844] veth0_vlan: entered promiscuous mode [ 75.457602][ T49] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.467637][ T5853] veth1_vlan: entered promiscuous mode [ 75.475118][ T5848] Bluetooth: hci3: command tx timeout [ 75.489382][ T5844] veth1_vlan: entered promiscuous mode [ 75.497952][ T49] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.498952][ T1120] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.515151][ T58] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.524426][ T1120] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.543775][ T58] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.555827][ T5854] Bluetooth: hci0: command tx timeout [ 75.555859][ T51] Bluetooth: hci2: command tx timeout [ 75.561307][ T5848] Bluetooth: hci1: command tx timeout [ 75.567073][ T5162] Bluetooth: hci4: command tx timeout [ 75.637741][ T5837] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 75.708142][ T5838] veth0_macvtap: entered promiscuous mode [ 75.791545][ T5838] veth1_macvtap: entered promiscuous mode [ 75.812144][ T5853] veth0_macvtap: entered promiscuous mode [ 75.862932][ T5853] veth1_macvtap: entered promiscuous mode [ 75.877156][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.882768][ T5844] veth0_macvtap: entered promiscuous mode [ 75.893179][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.451308][ T5844] veth1_macvtap: entered promiscuous mode [ 76.482103][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.500687][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.523977][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.575741][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.598321][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.671186][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.738614][ T1120] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.753575][ T1120] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.890801][ T1120] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.903944][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.920744][ T1120] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.932215][ T1120] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.943623][ T1120] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.966235][ T1120] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.999629][ T1120] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.012956][ T5967] xt_connbytes: Forcing CT accounting to be enabled [ 77.021342][ T5967] xt_NFQUEUE: number of queues (65528) out of range (got 65782) [ 77.056374][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.073762][ T5965] bridge1: entered promiscuous mode [ 77.080868][ T5965] bridge1: entered allmulticast mode [ 77.087256][ T5967] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 77.101307][ T5967] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.110151][ T5967] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.181963][ T96] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.183181][ T1120] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.202526][ T96] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.225234][ T1120] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.254262][ T96] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.318415][ T96] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.363570][ T1120] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.379468][ T1120] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.555239][ T5848] Bluetooth: hci3: command tx timeout [ 77.644232][ T5848] Bluetooth: hci1: command tx timeout [ 77.650934][ T5848] Bluetooth: hci0: command tx timeout [ 77.655305][ T51] Bluetooth: hci2: command tx timeout [ 77.656941][ T5848] Bluetooth: hci4: command tx timeout [ 78.640340][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.656073][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.677217][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.703425][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.761803][ T5979] xt_NFQUEUE: number of queues (65528) out of range (got 65782) [ 78.790930][ T5980] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 78.821595][ T5979] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 78.847018][ T1103] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.875277][ T1103] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.300698][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.558840][ T5984] Cannot find add_set index 65532 as target [ 79.572291][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.018848][ T47] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 80.196485][ T47] usb 3-1: Using ep0 maxpacket: 32 [ 80.216287][ T47] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 80.238424][ T47] usb 3-1: config 0 has no interfaces? [ 80.252066][ T47] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 80.273062][ T47] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.329744][ T47] usb 3-1: Product: syz [ 80.357444][ T47] usb 3-1: Manufacturer: syz [ 80.377522][ T47] usb 3-1: SerialNumber: syz [ 80.457077][ T47] usb 3-1: config 0 descriptor?? [ 80.494855][ T5912] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 80.656680][ T5912] usb 1-1: Using ep0 maxpacket: 32 [ 81.087421][ T5912] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 81.124176][ T5912] usb 1-1: config 0 has no interface number 0 [ 81.163928][ T5912] usb 1-1: config 0 interface 85 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 81.210844][ T5912] usb 1-1: config 0 interface 85 has no altsetting 0 [ 81.239107][ T5912] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 81.257112][ T5912] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.352143][ T5912] usb 1-1: Product: syz [ 81.376995][ T6010] binder: 6006:6010 ioctl 80286722 0 returned -22 [ 81.660866][ T5912] usb 1-1: Manufacturer: syz [ 81.669449][ T10] cfg80211: failed to load regulatory.db [ 81.678759][ T5912] usb 1-1: SerialNumber: syz [ 81.707800][ T5912] usb 1-1: config 0 descriptor?? [ 81.841345][ T5912] appletouch 1-1:0.85: Could not find int-in endpoint [ 81.877756][ T5912] appletouch 1-1:0.85: probe with driver appletouch failed with error -5 [ 81.939644][ T5912] usbhid 1-1:0.85: couldn't find an input interrupt endpoint [ 82.101301][ T6014] Zero length message leads to an empty skb [ 82.720999][ T1722] usb 3-1: USB disconnect, device number 2 [ 82.961975][ T6019] hfs: can't find a HFS filesystem on dev nullb0 [ 83.231713][ T6030] netlink: 32 bytes leftover after parsing attributes in process `syz.1.20'. [ 83.929336][ T6040] Cannot find add_set index 65532 as target [ 84.654818][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 85.232098][ T6037] Cannot find add_set index 65532 as target [ 85.731975][ T10] usb 1-1: USB disconnect, device number 2 [ 86.697230][ T6051] loop6: detected capacity change from 0 to 7 [ 86.737167][ T6053] netlink: 12 bytes leftover after parsing attributes in process `syz.3.27'. [ 86.784620][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 86.794052][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 87.068432][ T6054] netlink: 68 bytes leftover after parsing attributes in process `syz.3.27'. [ 87.078124][ T6054] netlink: 68 bytes leftover after parsing attributes in process `syz.3.27'. [ 87.157301][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 87.166512][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 87.187669][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 87.196868][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 87.224621][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 87.233848][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 87.264008][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 87.273234][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 87.283567][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 87.292841][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 87.305656][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 87.314872][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 87.323878][ T6051] ldm_validate_partition_table(): Disk read failed. [ 87.336891][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 87.346194][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 87.356743][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 87.365924][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 87.376600][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 87.385782][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 87.398123][ T6051] Dev loop6: unable to read RDB block 0 [ 87.415562][ T6051] loop6: unable to read partition table [ 87.426694][ T6051] loop6: partition table beyond EOD, truncated [ 87.433665][ T6051] loop_reread_partitions: partition scan of loop6 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 88.545793][ T6063] binder: 6057:6063 ioctl c0306201 0 returned -14 [ 88.556385][ T6063] binder: 6057:6063 ioctl 80286722 0 returned -22 [ 89.400298][ T6068] xt_connbytes: Forcing CT accounting to be enabled [ 89.414963][ T6068] xt_NFQUEUE: number of queues (65528) out of range (got 65782) [ 89.441764][ T6068] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 89.503470][ T6068] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.511100][ T6068] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.146632][ T6074] loop6: detected capacity change from 0 to 7 [ 90.263949][ T6075] netlink: 12 bytes leftover after parsing attributes in process `syz.2.31'. [ 90.325960][ T6074] ldm_validate_partition_table(): Disk read failed. [ 90.441148][ T6077] netlink: 68 bytes leftover after parsing attributes in process `syz.2.31'. [ 90.450134][ T6077] netlink: 68 bytes leftover after parsing attributes in process `syz.2.31'. [ 90.471017][ T6074] Dev loop6: unable to read RDB block 0 [ 90.525384][ T6074] loop6: unable to read partition table [ 90.538427][ T6074] loop6: partition table beyond EOD, truncated [ 90.545442][ T6074] loop_reread_partitions: partition scan of loop6 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 91.897022][ T29] audit: type=1800 audit(1773980635.962:2): pid=6085 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.33" name="file1" dev="overlay" ino=51 res=0 errno=0 [ 92.005540][ T1722] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 93.735146][ T6103] m1Ie5n: entered promiscuous mode [ 94.489928][ T6080] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000003: 0000 [#1] SMP KASAN PTI [ 94.501851][ T6080] KASAN: null-ptr-deref in range [0x0000000000000018-0x000000000000001f] [ 94.510272][ T6080] CPU: 0 UID: 0 PID: 6080 Comm: syz.4.35 Tainted: G L syzkaller #0 PREEMPT(full) [ 94.520939][ T6080] Tainted: [L]=SOFTLOCKUP [ 94.525265][ T6080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 94.535309][ T6080] RIP: 0010:rwsem_mark_wake+0xfa/0x7c0 [ 94.540775][ T6080] Code: 01 00 74 08 4c 89 f7 e8 94 d9 8d 00 4c 89 74 24 10 4d 8b 26 4d 8d 74 24 18 4c 89 f0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <0f> b6 04 08 84 c0 0f 85 75 06 00 00 41 83 3e 00 74 64 4c 89 ef be [ 94.560459][ T6080] RSP: 0018:ffffc90004dc79a0 EFLAGS: 00010006 [ 94.566612][ T6080] RAX: 0000000000000003 RBX: 0000000000000000 RCX: dffffc0000000000 [ 94.574577][ T6080] RDX: 1ffff920009b8f40 RSI: ffffffff8e1b1f01 RDI: ffffffff8c287200 [ 94.582540][ T6080] RBP: ffffc90004dc7aa0 R08: 0000000000000003 R09: 0000000000000004 [ 94.590513][ T6080] R10: dffffc0000000000 R11: fffff520009b8f50 R12: 0000000000000000 [ 94.598476][ T6080] R13: ffff8880375cb4d0 R14: 0000000000000018 R15: ffffc90004dc7c20 [ 94.606439][ T6080] FS: 00005555696af500(0000) GS:ffff888125436000(0000) knlGS:0000000000000000 [ 94.615350][ T6080] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 94.621917][ T6080] CR2: 0000001b31d15ff8 CR3: 0000000057e96000 CR4: 00000000003526f0 [ 94.629886][ T6080] Call Trace: [ 94.633250][ T6080] [ 94.636202][ T6080] ? __lock_acquire+0x6b5/0x2cf0 [ 94.641146][ T6080] ? __pfx_rwsem_mark_wake+0x10/0x10 [ 94.646507][ T6080] ? do_raw_spin_lock+0x12b/0x2f0 [ 94.651521][ T6080] rwsem_del_wake_waiter+0x25d/0x2e0 [ 94.656814][ T6080] rwsem_down_write_slowpath+0xa6f/0x1080 [ 94.662545][ T6080] ? rwsem_down_write_slowpath+0x4a3/0x1080 [ 94.668439][ T6080] ? __pfx_rwsem_down_write_slowpath+0x10/0x10 [ 94.674586][ T6080] ? futex_wake+0x4ac/0x580 [ 94.679079][ T6080] ? __pfx_futex_wait+0x10/0x10 [ 94.683930][ T6080] ? vm_mmap_pgoff+0x234/0x4f0 [ 94.688684][ T6080] down_write_killable+0x1eb/0x240 [ 94.693806][ T6080] ? __pfx_down_write_killable+0x10/0x10 [ 94.699457][ T6080] ? apparmor_mmap_file+0x197/0x3e0 [ 94.704648][ T6080] ? security_mmap_file+0x4df/0xa20 [ 94.709840][ T6080] vm_mmap_pgoff+0x234/0x4f0 [ 94.714431][ T6080] ? __se_sys_futex+0x3a8/0x450 [ 94.719274][ T6080] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 94.724377][ T6080] ? __pfx___se_sys_futex+0x10/0x10 [ 94.729564][ T6080] ? rcu_is_watching+0x15/0xb0 [ 94.734326][ T6080] ? ksys_mmap_pgoff+0xf3/0x760 [ 94.739177][ T6080] ? __x64_sys_mmap+0x7f/0x140 [ 94.743934][ T6080] do_syscall_64+0x14d/0xf80 [ 94.744761][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 94.748507][ T6080] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.762694][ T6080] ? clear_bhb_loop+0x40/0x90 [ 94.767363][ T6080] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.773342][ T6080] RIP: 0033:0x7f619779c502 [ 94.777776][ T6080] Code: 4f 01 00 0f 1f 44 00 00 41 f7 c1 ff 0f 00 00 75 27 55 89 cd 53 48 89 fb 48 85 ff 74 3b 41 89 ea 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 6e 5b 5d c3 0f 1f 00 48 c7 c0 e8 ff ff ff 64 [ 94.797375][ T6080] RSP: 002b:00007ffc8d56db08 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 94.805784][ T6080] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f619779c502 [ 94.813739][ T6080] RDX: 0000000000000000 RSI: 0000000000021000 RDI: 0000000000000000 [ 94.821710][ T6080] RBP: 0000000000020022 R08: 00000000ffffffff R09: 0000000000000000 [ 94.829675][ T6080] R10: 0000000000020022 R11: 0000000000000246 R12: 00007ffc8d56dc70 [ 94.837632][ T6080] R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000 [ 94.845604][ T6080] [ 94.848617][ T6080] Modules linked in: [ 94.852502][ T6080] ---[ end trace 0000000000000000 ]--- [ 94.857949][ T6080] RIP: 0010:rwsem_mark_wake+0xfa/0x7c0 [ 94.863404][ T6080] Code: 01 00 74 08 4c 89 f7 e8 94 d9 8d 00 4c 89 74 24 10 4d 8b 26 4d 8d 74 24 18 4c 89 f0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <0f> b6 04 08 84 c0 0f 85 75 06 00 00 41 83 3e 00 74 64 4c 89 ef be [ 94.883017][ T6080] RSP: 0018:ffffc90004dc79a0 EFLAGS: 00010006 [ 94.889095][ T6080] RAX: 0000000000000003 RBX: 0000000000000000 RCX: dffffc0000000000 [ 94.897056][ T6080] RDX: 1ffff920009b8f40 RSI: ffffffff8e1b1f01 RDI: ffffffff8c287200 [ 94.905022][ T6080] RBP: ffffc90004dc7aa0 R08: 0000000000000003 R09: 0000000000000004 [ 94.912987][ T6080] R10: dffffc0000000000 R11: fffff520009b8f50 R12: 0000000000000000 [ 94.920943][ T6080] R13: ffff8880375cb4d0 R14: 0000000000000018 R15: ffffc90004dc7c20 [ 94.928894][ T6080] FS: 00005555696af500(0000) GS:ffff888125436000(0000) knlGS:0000000000000000 [ 94.937851][ T6080] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 94.944422][ T6080] CR2: 0000001b31d15ff8 CR3: 0000000057e96000 CR4: 00000000003526f0 [ 94.952410][ T6080] Kernel panic - not syncing: Fatal exception [ 94.958752][ T6080] Kernel Offset: disabled [ 94.963063][ T6080] Rebooting in 86400 seconds..