last executing test programs: 24.876209797s ago: executing program 1 (id=41): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x20001, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = io_uring_setup(0x77bb, 0x0) io_uring_enter(r0, 0x800000, 0x2, 0xf, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r2, &(0x7f0000000200)=[{&(0x7f0000000100)=""/57, 0x39}], 0x1, 0x0, 0x0) 22.40666977s ago: executing program 1 (id=51): read(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x10, 0x0, 0x0) epoll_create1(0x0) syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x82002) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x34, r6, 0x1, 0xffffffff, 0x25dfdc02, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x1}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x4020804) 18.363516839s ago: executing program 1 (id=54): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe1000/0x18000)=nil, 0x0, 0x0, 0x34, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r3 = syz_io_uring_setup(0x10d, &(0x7f00000003c0), &(0x7f0000000380)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r3, 0x3f70, 0x0, 0x0, 0x0, 0x0) mount$afs(&(0x7f0000000540)=ANY=[@ANYBLOB='#syz1:'], &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) 17.968512777s ago: executing program 4 (id=57): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xd0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="85000000c6000000799000000000000063008000000000009500050000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x13, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x23) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_usb_connect(0x0, 0x34, 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) statx(r0, 0x0, 0x0, 0x1, &(0x7f0000000580)) r3 = socket$nl_rdma(0x10, 0x3, 0x14) syz_open_dev$vcsu(&(0x7f0000000040), 0x5, 0x22000) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x38, 0x1403, 0x1, 0xf, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'wlan0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8080}, 0x8810) sendmsg$NFQNL_MSG_VERDICT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x14, 0x3, 0x3, 0x3, 0x0, 0x0, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0xc4}, 0x0) 14.832065258s ago: executing program 1 (id=62): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r0 = socket(0x2b, 0x800, 0x10000) listen(r0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) getsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000280), &(0x7f00000002c0)=0x8) sendto$packet(r1, &(0x7f0000000080)="55c37de539e707dd91a7eb4813b29e925c444909ac343ee8ef8bd594ca38fec314c0f92daf964ef093f8faeb08f09b103a993a", 0x33, 0x26c4b1ca7ceab07, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2, 0x0, 0x3}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) r4 = add_key$keyring(&(0x7f0000000240), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000440)='asymmetric\x00', 0x0, &(0x7f0000000000)="3080", 0x2, r4) 13.242990456s ago: executing program 4 (id=66): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80840, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x56, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x3000c81c) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x14, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0xff, 0xff, 0x0, '\x00', 0x0, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13.157997241s ago: executing program 1 (id=67): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='dctcp\x00', 0x6) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) r4 = syz_open_dev$sg(&(0x7f0000000180), 0x7, 0x48180) ioctl$SG_NEXT_CMD_LEN(r4, 0x2283, &(0x7f00000001c0)=0x7c) sendto$inet(r3, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0) recvmsg(r3, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x437aba2}], 0x1, 0x0, 0x46, 0x407006}, 0x104) 13.10817178s ago: executing program 0 (id=68): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='\x00', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c}}]}, 0x4c}}, 0x0) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, 0x0, 0x8) shutdown(r0, 0x1) close(0x3) 11.628214014s ago: executing program 0 (id=71): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_init_net_socket$llc(0x1a, 0x1, 0x0) recvfrom$inet_nvme(0xffffffffffffffff, 0x0, 0x0, 0x40010100, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xa) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r4, 0xffffffffffffffff}, 0x0, &(0x7f0000000300)=r3}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5}, 0x0, &(0x7f00000001c0)=r3}, 0x20) sendmmsg$unix(r1, &(0x7f0000001b40), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x40}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet6(0xa, 0x2, 0x5) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r7, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 10.700078536s ago: executing program 1 (id=72): r0 = gettid() prctl$PR_SCHED_CORE(0x3e, 0x2, r0, 0x1, &(0x7f0000000100)) r1 = getpgrp(r0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r6}, 0x10) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000380)=@urb_type_bulk={0x3, {0x1, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$6lowpan_control(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(0xffffffffffffffff, 0x80605414, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0xc058534f, &(0x7f0000002380)={{0x0, 0x1}, 0x0, 0x8000, 0x4, {0x0, 0x1}, 0x3, 0x800}) timer_create(0x5, &(0x7f0000533fa0)={0x0, 0x39, 0x1, @tid=r1}, &(0x7f0000bbdffc)) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0xdfffffff, 0x1000, 0x0, 0x5}, 0x20) setsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000080)={0x1, 0xc0}, 0x2) 10.699581095s ago: executing program 4 (id=73): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000027c0), 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r0, 0xc06855c8, &(0x7f0000002cc0)={0x11, 0xfffffff2, {0x53, 0x7, 0x7, {0x4bb, 0x5}, {0x4, 0x5}, @const={0x8, {0xfffc, 0x7}}}, {0x55, 0xc, 0x94b, {0x313, 0x8d}, {0xfe00, 0x5b1}, @cond=[{0x4, 0x1, 0x8001, 0x0, 0x6, 0x800}, {0x57, 0x3d, 0xfff, 0x2, 0xfff, 0x3}]}}) syz_clone3(&(0x7f00000004c0)={0x8800, &(0x7f0000000140), 0x0, &(0x7f0000000340), {0x2d}, &(0x7f0000000380)=""/53, 0x35, &(0x7f00000003c0)=""/162, &(0x7f0000000480)=[0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0], 0xa}, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000540)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) mremap(&(0x7f000016c000/0x4000)=nil, 0x4000, 0x40000000, 0x3, &(0x7f000063c000/0x3000)=nil) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) sendto$inet6(0xffffffffffffffff, 0x0, 0xfffffffffffffd5c, 0x20000045, &(0x7f0000b63fe4)={0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffe}, 0x1c) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x200000, &(0x7f0000006680)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) fallocate(r4, 0x0, 0x0, 0x10fff9) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x7000001, 0x12, r4, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa07, &(0x7f0000000280)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}}) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r5, 0xc0106407, &(0x7f00000000c0)={0x1, 0x2}) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, r5, {0x8}}, './file1\x00'}) ioctl$DRM_IOCTL_GET_UNIQUE(r5, 0xc0086401, &(0x7f00000001c0)={0x0, 0x0}) syz_open_dev$usbfs(&(0x7f0000000200), 0x8, 0x432423) io_setup(0x8945, &(0x7f0000000300)) 10.661103982s ago: executing program 3 (id=74): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x6, &(0x7f0000000040)=0xff, 0x4) 9.140091863s ago: executing program 3 (id=77): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_open_dev$tty20(0xc, 0x4, 0x1) socket$packet(0x11, 0x2, 0x300) socket$qrtr(0x2a, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) socket(0x2a, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000006680)=ANY=[@ANYBLOB="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"/4281], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0x20, &(0x7f0000000400)={&(0x7f0000000300)=""/92, 0x5c, 0x0, &(0x7f0000000380)=""/78, 0x4e}}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0x6d33, 0x1000, 0x0, 0x4000000}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 9.139278305s ago: executing program 4 (id=78): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000640)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1b}}]}, &(0x7f0000000180)=0x10) iopl(0x3) prctl$PR_SET_MM(0x4c, 0x5, &(0x7f00007d8000/0x1000)=nil) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='veno\x00', 0x5) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'netdevsim0\x00'}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') open(&(0x7f0000000000)='.\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a) 8.908783705s ago: executing program 0 (id=79): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000003700)={0x77359400}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$UI_DEV_CREATE(r3, 0x5501) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r4, 0x6, 0x1f, 0x0, 0x0) getsockopt$inet6_mptcp_buf(r4, 0x11c, 0x2, 0x0, 0x0) 8.2151241s ago: executing program 2 (id=80): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40042, 0x1fe) close(r3) execveat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r4 = memfd_create(&(0x7f0000000400)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x0) execveat(r4, 0x0, 0x0, 0x0, 0x1000) 7.987901141s ago: executing program 4 (id=81): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x2}], 0x10, 0x0, @void, @value}, 0x90) socket$inet6_sctp(0xa, 0x1, 0x84) getpgid(0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x3, &(0x7f0000000200)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x410000022) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@getchain={0x44, 0x66, 0x300, 0x70bd2c, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, {0xc, 0xf}, {0x0, 0xffe0}, {0xe, 0xfff1}}, [{0x8}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0x8001}]}, 0x44}}, 0x8000) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r4 = io_uring_setup(0x3eaf, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x3, 0x40000}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0), 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000240)=[@mss, @sack_perm, @timestamp, @mss={0x2, 0x1}, @window, @timestamp, @timestamp, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x1000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) close(0xffffffffffffffff) 7.065976934s ago: executing program 0 (id=82): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r0, 0x8932, &(0x7f00000000c0)={'bridge0\x00', @ifru_map={0xfffffffffffffff4, 0x1000006d, 0x9, 0x9, 0x5, 0xa}}) 6.171635799s ago: executing program 2 (id=83): syz_open_dev$vim2m(&(0x7f0000000080), 0x9, 0x2) socket$tipc(0x1e, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r0) socket$tipc(0x1e, 0x4, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000000600)={0x9e, 0x6, 0x40000002, 0x0, 0xfffffffffffffffe, 0x1000000000, 0x4, 0x8}, 0x0, 0x0, 0x0, 0x0) 6.087705954s ago: executing program 3 (id=84): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc038563b, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x103201, 0x0) write$P9_RSTATu(r3, &(0x7f0000000080)={0x265, 0x2, 0xafd, {{0x500, 0x124, 0x28, 0x1f00, {}, 0x0, 0x0, 0xc, 0x401, 0xffffffffffffff7d, '\nnodev{evo\x03\xd3\x8b\x92\x00'/27, 0x28, 'pg>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18x\x99\xa9\x16c\x88\x14\xe5p\x81\x03\xb4\x94\xe1\x00\x00\x00\x00\x00\x00\x00\x00', 0x2, '\b\x00', 0xac, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4@\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xe2\x89\xdad\x9a7\x009\x86Ac\x1dD\xf4\xa3\x9b\x11\x91\x93z(\x0e\x8d\x88\x9f\xc2 \xd1\x15\xac\x8e/\x18K\x9aau\x8d&w*\xb0\xf2\x04M\x8e\xf0&=\xdd\x97\xd3\xc4\'\xb3\xa52\xef\xab\x1d\x1c\xe3,\xa7\xc1\xfc#\x1a\xf4\x84\b\xe0+%P(\xb7\xc9\xbb\x859oM\x8a\xf0\xeb\x95\xfc\x0e\xcc\x99\xf7\x80\xe2'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0xfd85) 5.955886928s ago: executing program 0 (id=85): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000dc0)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f00000002c0)={0x20, 0xd}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 5.838648019s ago: executing program 2 (id=86): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xd) r1 = fcntl$dupfd(r0, 0x406, r0) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x0, 0x10100, 0x0, 0x3b9}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0x2def, 0x0, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) 4.882602953s ago: executing program 2 (id=87): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) rt_sigaction(0x1, 0x0, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000180)=""/109, 0x6d}], 0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x500) r1 = getpid() openat$binfmt_register(0xffffff9c, &(0x7f0000000000), 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sysfs$2(0x2, 0xeff, 0x0) r2 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) sendto(r2, 0x0, 0x0, 0x0, 0x0, 0x0) ppoll(0x0, 0x0, &(0x7f00000003c0)={0x0, 0x989680}, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) sched_setscheduler(r1, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(r5, 0x6b, 0x3, &(0x7f0000000080), &(0x7f0000000180)=0x4) 4.636100691s ago: executing program 3 (id=88): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'ipvlan0\x00'}) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) socket$inet(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}}], 0x400000000000193, 0x48, 0x0) r4 = openat$vimc0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r5, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r5, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) shutdown(r6, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b70200"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r8, 0x0, 0x10}, 0x18) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) ioctl$VIDIOC_ENCODER_CMD(r4, 0xc028564d, &(0x7f0000000140)={0x0, 0x0, [0x4, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x40000000]}) 3.324016417s ago: executing program 2 (id=89): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x1c, 0x0, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}]}, 0x1c}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r2) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="01000100f300000000001f"], 0x1c}}, 0x0) 2.993743947s ago: executing program 3 (id=90): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000400)={'wpan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000011c0), r0) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0102}}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_IFTYPE={0x8}]}, 0x3c}}, 0x800) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, 0x0, 0x4000) 2.634641142s ago: executing program 4 (id=91): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x101001, 0x0) ioctl$PTP_CLOCK_GETCAPS(r5, 0x80503d01, &(0x7f0000000280)) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r7, 0xf, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$NL80211_CMD_START_AP(r6, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc804}, 0x0) sendmsg$nl_route(r0, 0x0, 0x10004044) 2.506963986s ago: executing program 3 (id=92): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x1000000000000f, &(0x7f0000000080)=0x7fffffff, 0x4) setsockopt$sock_attach_bpf(r2, 0x1, 0x34, &(0x7f0000000040), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r5, 0x400455c8, 0x20000000008) bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) r7 = io_uring_setup(0x3458, &(0x7f0000000080)={0x0, 0xffffeffb, 0x18, 0x3, 0x5}) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r7, 0x10, 0x0, 0x0) ioctl$SG_BLKTRACETEARDOWN(r6, 0x1276, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x24000000) socket(0x10, 0x2, 0x0) r8 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(r8, 0x40045109, &(0x7f0000001280)) ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x50}}, 0x0) 2.377898115s ago: executing program 2 (id=93): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00'}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000000200)={0x3, 0x8, 0xff, 0x0, @vifc_lcl_addr=@local}, 0x10) ioctl$F2FS_IOC_GET_PIN_FILE(r1, 0x8004f50e, &(0x7f00000000c0)) socket$nl_netfilter(0x10, 0x3, 0xc) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) r3 = io_uring_setup(0x30d3, &(0x7f0000000000)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r4, 0x1, 0x10000000000009, &(0x7f0000000180)="00050002", 0x4) connect$inet6(r4, &(0x7f0000000140)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r4, 0x6, 0x4, &(0x7f0000000200)=0x417c, 0x4) close_range(r3, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x80, 0x0, 0x0, 0xee01}}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a0030"], 0xb8}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r8 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102385, 0x18ff1) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 0s ago: executing program 0 (id=94): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000001800), 0x0, 0x0, 0x18, 0x20084}, 0x8094) recvmmsg(r1, &(0x7f0000001140), 0x700, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sendmmsg$inet(r1, &(0x7f0000000800)=[{{&(0x7f0000000880)={0x2, 0x4e24, @multicast2}, 0x10, 0x0, 0x0, &(0x7f00000007c0)}}], 0x1, 0x4c814) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_ethernet(0x5e, &(0x7f00000001c0)={@empty, @link_local, @val={@val={0x88a8, 0x5, 0x0, 0x1}, {0x8100, 0x3}}, {@canfd={0xd, {{0x1, 0x0, 0x0, 0x1}, 0x1c, 0x2, 0x0, 0x0, "7cdf1ed7b21059d91f113c8748983f18068667dde8ac3fa102b276966d6a9e5bd624ee846df55d976fbe6ca70060137d41df80f8a5f6a661389b0b78375881ab"}}}}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3a, &(0x7f0000000000)=0x5, 0x4) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) mkdir(0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, &(0x7f0000000680)={[{@gid}]}) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000240), 0x42001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f00000002c0)={{0xffffffffffffffff, 0x3, 0x9, 0x0, 0x1}}) sendmsg$tipc(r3, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000540)='.\x00', &(0x7f0000000040), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000000000000000000000001000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.146' (ED25519) to the list of known hosts. [ 80.745096][ T5819] cgroup: Unknown subsys name 'net' [ 80.890367][ T5819] cgroup: Unknown subsys name 'cpuset' [ 80.902833][ T5819] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 82.896956][ T5819] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 87.125138][ T9] cfg80211: failed to load regulatory.db [ 87.991253][ T5831] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 88.005478][ T5831] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 88.014297][ T5831] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 88.022515][ T5836] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 88.024835][ T5831] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 88.039131][ T5836] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 88.039433][ T5831] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 88.056748][ T5836] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 88.057951][ T5831] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.080530][ T5143] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 88.097055][ T5836] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 88.107900][ T5143] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 88.118330][ T56] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 88.129153][ T5143] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 88.142611][ T56] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 88.157240][ T56] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 88.167659][ T56] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 88.178236][ T5831] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.186138][ T5143] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 88.198069][ T5831] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 88.208411][ T5831] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 88.218602][ T5831] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 88.238153][ T5143] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 88.248015][ T5143] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.327109][ T5143] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 88.338965][ T5143] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 88.349146][ T5143] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 88.359744][ T5143] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 88.377353][ T5143] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 88.387882][ T5143] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 88.916457][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 89.052659][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 89.281916][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.291306][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.299595][ T5830] bridge_slave_0: entered allmulticast mode [ 89.308232][ T5830] bridge_slave_0: entered promiscuous mode [ 89.338339][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 89.360141][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.367861][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.375950][ T5830] bridge_slave_1: entered allmulticast mode [ 89.384847][ T5830] bridge_slave_1: entered promiscuous mode [ 89.408985][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 89.518436][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.574998][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 89.596459][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.627487][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.635189][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.643234][ T5837] bridge_slave_0: entered allmulticast mode [ 89.651262][ T5837] bridge_slave_0: entered promiscuous mode [ 89.724645][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.733087][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.741384][ T5837] bridge_slave_1: entered allmulticast mode [ 89.751180][ T5837] bridge_slave_1: entered promiscuous mode [ 89.789147][ T5830] team0: Port device team_slave_0 added [ 89.800727][ T5830] team0: Port device team_slave_1 added [ 89.933373][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.942108][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.950806][ T5833] bridge_slave_0: entered allmulticast mode [ 89.958914][ T5833] bridge_slave_0: entered promiscuous mode [ 89.985251][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.993449][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.002255][ T5839] bridge_slave_0: entered allmulticast mode [ 90.010934][ T5839] bridge_slave_0: entered promiscuous mode [ 90.022697][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.061547][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.069613][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.077562][ T5833] bridge_slave_1: entered allmulticast mode [ 90.085717][ T5833] bridge_slave_1: entered promiscuous mode [ 90.094419][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.102696][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.130936][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.146197][ T5143] Bluetooth: hci1: command tx timeout [ 90.146203][ T56] Bluetooth: hci0: command tx timeout [ 90.149094][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.165878][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.193805][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.206037][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.213286][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.221442][ T5839] bridge_slave_1: entered allmulticast mode [ 90.229671][ T5839] bridge_slave_1: entered promiscuous mode [ 90.235751][ T56] Bluetooth: hci2: command tx timeout [ 90.257170][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.305069][ T56] Bluetooth: hci3: command tx timeout [ 90.353415][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.381035][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.392947][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.401895][ T5843] bridge_slave_0: entered allmulticast mode [ 90.411157][ T5843] bridge_slave_0: entered promiscuous mode [ 90.442403][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.474055][ T56] Bluetooth: hci4: command tx timeout [ 90.485658][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.513561][ T5837] team0: Port device team_slave_0 added [ 90.523497][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.534544][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.543379][ T5843] bridge_slave_1: entered allmulticast mode [ 90.551413][ T5843] bridge_slave_1: entered promiscuous mode [ 90.576371][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.622912][ T5837] team0: Port device team_slave_1 added [ 90.648756][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.681992][ T5830] hsr_slave_0: entered promiscuous mode [ 90.689150][ T5830] hsr_slave_1: entered promiscuous mode [ 90.723812][ T5839] team0: Port device team_slave_0 added [ 90.748860][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.806170][ T5833] team0: Port device team_slave_0 added [ 90.817119][ T5839] team0: Port device team_slave_1 added [ 90.858445][ T5843] team0: Port device team_slave_0 added [ 90.882120][ T5833] team0: Port device team_slave_1 added [ 90.921466][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.930832][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.960479][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.979133][ T5843] team0: Port device team_slave_1 added [ 91.036074][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.043504][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.072188][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.117627][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.125394][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.153944][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.167081][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.174590][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.203223][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.248873][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.257324][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.293318][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.306765][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.314922][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.344342][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.359246][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.370167][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.400335][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.450943][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.458451][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.485935][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.551323][ T5837] hsr_slave_0: entered promiscuous mode [ 91.558555][ T5837] hsr_slave_1: entered promiscuous mode [ 91.565412][ T5837] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.573747][ T5837] Cannot create hsr debugfs directory [ 91.627608][ T5839] hsr_slave_0: entered promiscuous mode [ 91.635732][ T5839] hsr_slave_1: entered promiscuous mode [ 91.643854][ T5839] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.652219][ T5839] Cannot create hsr debugfs directory [ 91.782088][ T5833] hsr_slave_0: entered promiscuous mode [ 91.789757][ T5833] hsr_slave_1: entered promiscuous mode [ 91.797166][ T5833] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.806518][ T5833] Cannot create hsr debugfs directory [ 91.913095][ T5843] hsr_slave_0: entered promiscuous mode [ 91.922047][ T5843] hsr_slave_1: entered promiscuous mode [ 91.929005][ T5843] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.937107][ T5843] Cannot create hsr debugfs directory [ 92.225543][ T56] Bluetooth: hci0: command tx timeout [ 92.225567][ T5143] Bluetooth: hci1: command tx timeout [ 92.273213][ T5830] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 92.290042][ T5830] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 92.304919][ T5143] Bluetooth: hci2: command tx timeout [ 92.347420][ T5830] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 92.373668][ T5830] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 92.395877][ T5143] Bluetooth: hci3: command tx timeout [ 92.534195][ T5837] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 92.545035][ T5143] Bluetooth: hci4: command tx timeout [ 92.554818][ T5837] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 92.587696][ T5837] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 92.649617][ T5837] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 92.755196][ T5839] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 92.775617][ T5839] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 92.791135][ T5839] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 92.802937][ T5839] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 92.957251][ T5833] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 93.000294][ T5833] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 93.012245][ T5833] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 93.040334][ T5833] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 93.218149][ T5843] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 93.240842][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.263382][ T5843] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 93.289732][ T5843] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 93.322511][ T5843] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 93.350465][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.439903][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.460669][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.482323][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.490289][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.546434][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.554531][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.568900][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.576593][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.613152][ T54] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.621248][ T54] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.638546][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.758340][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.817523][ T1327] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.825757][ T1327] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.853462][ T54] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.861013][ T54] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.907333][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.069684][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.130079][ T5839] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 94.142861][ T5839] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 94.299492][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.314851][ T5143] Bluetooth: hci1: command tx timeout [ 94.320857][ T5143] Bluetooth: hci0: command tx timeout [ 94.352812][ T1106] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.360629][ T1106] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.380030][ T1106] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.387995][ T1106] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.397441][ T56] Bluetooth: hci2: command tx timeout [ 94.465045][ T56] Bluetooth: hci3: command tx timeout [ 94.558232][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.574342][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.607365][ T54] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.615253][ T54] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.625488][ T56] Bluetooth: hci4: command tx timeout [ 94.642630][ T1134] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.650511][ T1134] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.672661][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.843811][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.868036][ T5830] veth0_vlan: entered promiscuous mode [ 94.943310][ T5830] veth1_vlan: entered promiscuous mode [ 95.048880][ T5837] veth0_vlan: entered promiscuous mode [ 95.131016][ T5837] veth1_vlan: entered promiscuous mode [ 95.222490][ T5830] veth0_macvtap: entered promiscuous mode [ 95.249570][ T5830] veth1_macvtap: entered promiscuous mode [ 95.263355][ T5839] veth0_vlan: entered promiscuous mode [ 95.287729][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.333243][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.346027][ T5839] veth1_vlan: entered promiscuous mode [ 95.399563][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.433700][ T5837] veth0_macvtap: entered promiscuous mode [ 95.453236][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.493475][ T5837] veth1_macvtap: entered promiscuous mode [ 95.513967][ T5830] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.525443][ T5830] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.539675][ T5830] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.551041][ T5830] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.718835][ T5839] veth0_macvtap: entered promiscuous mode [ 95.740926][ T5839] veth1_macvtap: entered promiscuous mode [ 95.771906][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.783267][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.804477][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.836090][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.850262][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.862931][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.887564][ T5833] veth0_vlan: entered promiscuous mode [ 95.926980][ T5837] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.941917][ T5837] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.952716][ T5837] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.962882][ T5837] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.987158][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.000291][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.012433][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.024003][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.037152][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.089044][ T5833] veth1_vlan: entered promiscuous mode [ 96.119638][ T54] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.135155][ T54] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.160739][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.172378][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.183949][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.195577][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.210122][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.229841][ T5839] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.242530][ T5839] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.252938][ T5839] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.262875][ T5839] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.334626][ T5843] veth0_vlan: entered promiscuous mode [ 96.379255][ T1106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.388934][ T1106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.395299][ T5143] Bluetooth: hci1: command tx timeout [ 96.403299][ T56] Bluetooth: hci0: command tx timeout [ 96.453559][ T5843] veth1_vlan: entered promiscuous mode [ 96.465303][ T56] Bluetooth: hci2: command tx timeout [ 96.491019][ T5833] veth0_macvtap: entered promiscuous mode [ 96.556120][ T56] Bluetooth: hci3: command tx timeout [ 96.573143][ T5833] veth1_macvtap: entered promiscuous mode [ 96.615362][ T1327] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.624238][ T1327] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.656738][ T5830] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 96.704990][ T56] Bluetooth: hci4: command tx timeout [ 96.742555][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.754238][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.766083][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.776845][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.787670][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.800335][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.814541][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.833475][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.870655][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.921315][ T5843] veth0_macvtap: entered promiscuous mode [ 96.986533][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.000589][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.004452][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.067481][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.083264][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.103913][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.150744][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.257798][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.501361][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.700210][ T1327] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.712359][ T1327] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.757859][ T5833] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.809613][ T5833] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.822145][ T5833] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.842374][ T5833] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.880803][ T5843] veth1_macvtap: entered promiscuous mode [ 98.015912][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.046701][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.104052][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.132028][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.143905][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.157082][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.171920][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.201041][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.228575][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.002901][ T5925] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3'. [ 99.345891][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.410155][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.471134][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.501747][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.565104][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.576623][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.588956][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.602261][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.506959][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.555232][ T1206] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 100.625924][ T5843] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.671634][ T5843] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.713342][ T5843] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.744008][ T5843] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.815333][ T5939] xt_CT: No such helper "syz0" [ 100.836450][ T1206] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 100.897283][ T1206] usb 1-1: config 0 has no interfaces? [ 100.958237][ T1206] usb 1-1: New USB device found, idVendor=044e, idProduct=120b, bcdDevice= 0.00 [ 101.010785][ T1206] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.111788][ T1206] usb 1-1: config 0 descriptor?? [ 101.200547][ T1106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.280143][ T1106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.572324][ T5946] bpf: Bad value for 'gid' [ 102.016023][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.033914][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.843828][ T1147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.899541][ T1147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.935161][ T5955] Bluetooth: hci5: Frame reassembly failed (-84) [ 102.950451][ T35] Bluetooth: hci5: Frame reassembly failed (-84) [ 103.014663][ T5957] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13'. [ 103.056037][ T5957] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13'. [ 103.117746][ T1147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.164420][ T1147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.873392][ T5965] netlink: 40 bytes leftover after parsing attributes in process `syz.3.16'. [ 103.957576][ T5879] usb 1-1: USB disconnect, device number 2 [ 104.949622][ T5143] Bluetooth: hci5: command 0x1003 tx timeout [ 104.955049][ T56] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 105.137113][ T5978] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 106.148400][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 106.206769][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 106.379152][ T5990] Cannot find add_set index 0 as target [ 106.964856][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 107.350636][ T5992] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 108.664813][ T5999] Bluetooth: MGMT ver 1.23 [ 111.999300][ T5879] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 112.154181][ T46] IPVS: starting estimator thread 0... [ 112.185080][ T5879] usb 2-1: Using ep0 maxpacket: 16 [ 112.212507][ T6022] netlink: 48 bytes leftover after parsing attributes in process `syz.1.30'. [ 112.255195][ T6025] IPVS: using max 24 ests per chain, 57600 per kthread [ 112.634843][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 112.834713][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 112.894777][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 112.894928][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 112.904119][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 112.996500][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 113.005969][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 113.006611][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 116.448962][ T5879] usb 2-1: unable to get BOS descriptor or descriptor too short [ 116.473108][ T5879] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 116.495470][ T5879] usb 2-1: can't read configurations, error -71 [ 120.942568][ T6077] loop2: detected capacity change from 0 to 7 [ 120.981674][ T6077] loop2: [POWERTEC] p1 p2 [ 121.020146][ T6077] loop2: p1 size 1680801792 extends beyond EOD, truncated [ 121.080888][ T6077] loop2: p2 start 1635021614 is beyond EOD, truncated [ 121.260494][ T5842] udevd[5842]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 124.204065][ T6090] syz.0.50 (6090): drop_caches: 2 [ 127.435506][ T6110] wlan0 speed is unknown, defaulting to 1000 [ 127.445761][ T6110] wlan0 speed is unknown, defaulting to 1000 [ 127.454450][ T6110] wlan0 speed is unknown, defaulting to 1000 [ 127.611216][ T6110] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 127.970730][ T6124] warning: `syz.3.58' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 128.046374][ T6124] sp0: Synchronizing with TNC [ 128.629135][ T6110] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 128.858042][ T29] audit: type=1326 audit(1739730554.739:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6120 comm="syz.0.60" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f755318cde9 code=0x0 [ 129.147409][ T6110] wlan0 speed is unknown, defaulting to 1000 [ 129.197905][ T29] audit: type=1326 audit(1739730555.089:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6128 comm="syz.1.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18a798cde9 code=0x7ffc0000 [ 129.244914][ T6110] wlan0 speed is unknown, defaulting to 1000 [ 129.277064][ T6110] wlan0 speed is unknown, defaulting to 1000 [ 129.315383][ T6110] wlan0 speed is unknown, defaulting to 1000 [ 129.322144][ T29] audit: type=1326 audit(1739730555.119:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6128 comm="syz.1.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18a798cde9 code=0x7ffc0000 [ 129.421805][ T6110] wlan0 speed is unknown, defaulting to 1000 [ 129.468640][ T29] audit: type=1326 audit(1739730555.149:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6128 comm="syz.1.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f18a798cde9 code=0x7ffc0000 [ 130.472687][ T29] audit: type=1326 audit(1739730555.149:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6128 comm="syz.1.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18a798cde9 code=0x7ffc0000 [ 130.638081][ T29] audit: type=1326 audit(1739730555.149:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6128 comm="syz.1.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18a798cde9 code=0x7ffc0000 [ 130.753425][ T29] audit: type=1326 audit(1739730555.149:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6128 comm="syz.1.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7f18a798cde9 code=0x7ffc0000 [ 130.885105][ T29] audit: type=1326 audit(1739730555.149:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6128 comm="syz.1.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18a798cde9 code=0x7ffc0000 [ 131.013950][ T29] audit: type=1326 audit(1739730555.149:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6128 comm="syz.1.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18a798cde9 code=0x7ffc0000 [ 131.099480][ T29] audit: type=1326 audit(1739730555.149:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6128 comm="syz.1.62" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f18a798cde9 code=0x7ffc0000 [ 132.504384][ T6156] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 132.530600][ T6156] batman_adv: batadv0: Adding interface: gretap1 [ 132.537979][ T6156] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.571133][ T6156] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 133.206906][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.214391][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 136.850781][ T6198] process 'syz.2.80' launched './file1' with NULL argv: empty string added [ 138.345011][ T23] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 139.264985][ T23] usb 1-1: Using ep0 maxpacket: 8 [ 139.508339][ T23] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 139.577929][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.694525][ T23] usb 1-1: Product: syz [ 139.756924][ T23] usb 1-1: Manufacturer: syz [ 139.812865][ T23] usb 1-1: SerialNumber: syz [ 139.921071][ T23] usb 1-1: config 0 descriptor?? [ 140.773611][ T23] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 143.722837][ T23] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 143.835330][ T23] usb 1-1: USB disconnect, device number 3 [ 143.895870][ T6233] Oops: general protection fault, probably for non-canonical address 0xdffffc000000002b: 0000 [#1] PREEMPT SMP KASAN PTI [ 143.908671][ T6233] KASAN: null-ptr-deref in range [0x0000000000000158-0x000000000000015f] [ 143.917380][ T6233] CPU: 1 UID: 0 PID: 6233 Comm: syz.3.92 Not tainted 6.14.0-rc2-next-20250214-syzkaller #0 [ 143.927404][ T6233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 143.937747][ T6233] RIP: 0010:qca_close+0x72/0x2e0 [ 143.943175][ T6233] Code: c4 6b ea f8 48 89 2c 24 42 80 7c 2d 00 00 74 08 4c 89 f7 e8 00 ec 51 f9 4d 8b 26 49 8d bc 24 5a 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 28 84 c0 4c 89 eb 0f 85 de 01 00 00 45 0f b6 ac 24 5a [ 143.963155][ T6233] RSP: 0018:ffffc9000b99fb90 EFLAGS: 00010206 [ 143.969602][ T6233] RAX: 000000000000002b RBX: ffff888034cf9400 RCX: ffff88802c920000 [ 143.978157][ T6233] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000015a [ 143.986716][ T6233] RBP: 1ffff1100699f2b7 R08: ffffffff8189cef3 R09: 1ffffffff28acc2b [ 143.995329][ T6233] R10: dffffc0000000000 R11: ffffffff88d7afa0 R12: 0000000000000000 [ 144.004304][ T6233] R13: dffffc0000000000 R14: ffff888034cf95b8 R15: 0000000000000000 [ 144.014050][ T6233] FS: 000055555d350500(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 144.023971][ T6233] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 144.031616][ T6233] CR2: 0000563fa6f4a490 CR3: 00000000670dc000 CR4: 00000000003526f0 [ 144.040563][ T6233] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 144.048887][ T6233] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 144.057396][ T6233] Call Trace: [ 144.060764][ T6233] [ 144.063725][ T6233] ? __die_body+0x5f/0xb0 [ 144.068330][ T6233] ? die_addr+0xb0/0xe0 [ 144.072765][ T6233] ? exc_general_protection+0x3dd/0x5d0 [ 144.079028][ T6233] ? asm_exc_general_protection+0x26/0x30 [ 144.085129][ T6233] ? __pfx_qca_close+0x10/0x10 [ 144.089911][ T6233] ? enable_work+0x2e3/0x360 [ 144.094863][ T6233] ? qca_close+0x72/0x2e0 [ 144.099414][ T6233] hci_uart_tty_close+0x205/0x290 [ 144.104536][ T6233] tty_ldisc_kill+0xa3/0x1a0 [ 144.109325][ T6233] tty_ldisc_release+0x1a1/0x200 [ 144.114299][ T6233] tty_release_struct+0x2b/0xe0 [ 144.119395][ T6233] tty_release+0xd06/0x12c0 [ 144.124141][ T6233] ? __pfx_tty_release+0x10/0x10 [ 144.129269][ T6233] __fput+0x3e9/0x9f0 [ 144.133376][ T6233] task_work_run+0x24f/0x310 [ 144.138259][ T6233] ? _raw_spin_unlock+0x28/0x50 [ 144.143394][ T6233] ? __pfx_task_work_run+0x10/0x10 [ 144.148755][ T6233] ? syscall_exit_to_user_mode+0xa3/0x340 [ 144.154777][ T6233] syscall_exit_to_user_mode+0x13f/0x340 [ 144.160894][ T6233] do_syscall_64+0x100/0x230 [ 144.165862][ T6233] ? clear_bhb_loop+0x35/0x90 [ 144.170733][ T6233] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.177164][ T6233] RIP: 0033:0x7fe5a018cde9 [ 144.182044][ T6233] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 144.203166][ T6233] RSP: 002b:00007ffe79669758 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 144.212134][ T6233] RAX: 0000000000000000 RBX: 00007fe5a03a7ba0 RCX: 00007fe5a018cde9 [ 144.220631][ T6233] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 144.229155][ T6233] RBP: 00007fe5a03a7ba0 R08: 0000000000000254 R09: 0000001e79669a4f [ 144.237849][ T6233] R10: 00007fe5a03a7ac0 R11: 0000000000000246 R12: 0000000000023195 [ 144.247051][ T6233] R13: 00007fe5a03a6080 R14: ffffffffffffffff R15: 00007ffe79669870 [ 144.255537][ T6233] [ 144.258744][ T6233] Modules linked in: [ 144.264772][ T6233] ---[ end trace 0000000000000000 ]--- [ 144.270547][ T6233] RIP: 0010:qca_close+0x72/0x2e0 [ 144.275951][ T6233] Code: c4 6b ea f8 48 89 2c 24 42 80 7c 2d 00 00 74 08 4c 89 f7 e8 00 ec 51 f9 4d 8b 26 49 8d bc 24 5a 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 28 84 c0 4c 89 eb 0f 85 de 01 00 00 45 0f b6 ac 24 5a [ 144.296767][ T6233] RSP: 0018:ffffc9000b99fb90 EFLAGS: 00010206 [ 144.302874][ T6233] RAX: 000000000000002b RBX: ffff888034cf9400 RCX: ffff88802c920000 [ 144.310910][ T6233] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000015a [ 144.318980][ T6233] RBP: 1ffff1100699f2b7 R08: ffffffff8189cef3 R09: 1ffffffff28acc2b [ 144.327040][ T6233] R10: dffffc0000000000 R11: ffffffff88d7afa0 R12: 0000000000000000 [ 144.335177][ T6233] R13: dffffc0000000000 R14: ffff888034cf95b8 R15: 0000000000000000 [ 144.344335][ T6233] FS: 000055555d350500(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 144.353442][ T6233] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 144.360196][ T6233] CR2: 0000563fa6f4a490 CR3: 00000000670dc000 CR4: 00000000003526f0 [ 144.369661][ T6233] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 144.377992][ T6233] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 144.386607][ T6233] Kernel panic - not syncing: Fatal exception [ 144.393123][ T6233] Kernel Offset: disabled [ 144.397570][ T6233] Rebooting in 86400 seconds..