last executing test programs: 5.401347656s ago: executing program 3 (id=4): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$pppoe(0x18, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) listen(0xffffffffffffffff, 0x5) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="10c7e3e7ea7a2c6faf870ee0859243c1d4249b84bcbfc4e3b9f5bdebf14121ee02bd1d30ba55170127766e5661a358ba11dce25f3f5395867eb4a6b402e56f1a7cd72c039a9b8739053a03ad84b82d5eaef327e3ef365e81813f0ad0136830898c4b8e0b44dd5928ec6e8eb1f3cd65dd0c584fcad887ad5b01347d9f8c9fa385d6cd4f362f92c284c6e83401e2328c50b46630eb9c6e9cc7f8adb62107058b0e85872f4144c6d57a4da519cc5504937976f9d56ea00ed19438c852", 0xbb) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r2 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0xfffffffffffffffe, 0x1, 0x4, 0x100000000, 0x5, 0x0, 0xe}, {0x0, 0xffffffff, 0x400000003, 0xfffffffffffffffc}, 0xfffffffc, 0x1, 0x1, 0x0, 0x6}, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x4, 0x3c}, 0x0, @in=@multicast2, 0x0, 0x0, 0x0, 0xb7, 0x7, 0xfffffffe}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x1c) 5.115760861s ago: executing program 2 (id=3): r0 = socket$pppl2tp(0x18, 0x1, 0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) socket$netlink(0x10, 0x3, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x348, 0x160, 0x940c, 0x3002, 0x160, 0x2c0, 0x278, 0x3d8, 0x3d8, 0x278, 0x3d8, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private1, [0xffffff00, 0xffffff00, 0xffffffff], [0xffffffff, 0xff, 0xff000000, 0xff], 'geneve0\x00', 'veth1_to_bridge\x00', {}, {}, 0x84, 0x81, 0x2, 0x19}, 0x0, 0x100, 0x160, 0x0, {}, [@common=@frag={{0x30}, {[0x6, 0xfffe], 0x3, 0x2, 0x3}}, @inet=@rpfilter={{0x28}, {0x6}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@mcast2, [0x0, 0xffffffff, 0xff, 0xff], 0x4e24, 0x4e21, 0x4e24, 0x4e21, 0x81, 0x7, 0x33dd, 0x80000000}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, [0xff000000, 0xff, 0x0, 0xff000000], [0xffffff00, 0xffffffff, 0x0, 0xff000000], 'virt_wifi0\x00', 'pim6reg\x00', {0xff}, {0xff}, 0x32, 0x4, 0x2, 0x70}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xe}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@empty, 'ip6gre0\x00', {0x12}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a8) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, 0x0, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c80)=[{&(0x7f00000004c0)=ANY=[], 0x10}, {&(0x7f0000001ac0)=ANY=[@ANYBLOB="600000003840000225bd7000fcdb63ae0400718008", @ANYRES32=r3, @ANYBLOB="fd1acb113d49c104cdea935aeaefe2a14e413bd70e9dbe3e032b581dab9363c23c471f3daa9cb9dc2eb60319cfc3d5e90776c0fe9f00"], 0x60}], 0x2}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000400), 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r5, 0x40505331, &(0x7f0000000540)={{}, {0x18}, 0x0, 0x7}) getsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001cc0)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRESOCT=r5, @ANYBLOB="0536c95185b3350000000003000000000000000000005ee47cd7b1ab5e97aa4556a40339bc455b9c83c8c0f8090db1464423a96f18615d030073582fee353379cb1da7c091dcf6a6d89cf0d95bc5ef40d8e17a4b68deaa0fc18e9a54206109b93f6b4b2c5dbd96d25d736963a0209cef60485bcc1d395bea43660b46d03c0a68d6156183f3b1bfd60fa6c01fd630af9f500df613a5591c7ec054824b64b069cf6ac9800487ea355d9461405730a128f0dc69af9afdcccc153f874fde906727e53d9a1619e273ea", @ANYBLOB="1862f76422bc166bd690c1a3bc8877fa39f24c9fb544e8f4934b6951a5591f11f20c1d04fa188e2b364e1e226dade18e60b46a6f6b57a67b9c2e27a1ecd9b84520552882155016cb341af1377a63c9737bb02ca4d801c73f5fb90b30d118fdb60e7aeb90c47c27121061da23b072a819f14fab60a32b4bfb4d6240f88491f6be3b363b698e489fa4a273556d387f0c757cce2127b89ac4200f135d93e15f71caf1b1f8b0bd851c45f676aa962f2d930fa7d0c03f9a7acc2808e4c68261340f87751923e76dc20187358cb313f8373bad00718bdc9902f65dc7f016b68cf8de654560ad1371c973750bf9918c", @ANYRES8=r4], 0x70}, 0x1, 0x0, 0x0, 0x40}, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r8 = syz_open_dev$loop(&(0x7f0000000100), 0x9, 0x4000) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000001800)={'#! ', './file0', [], 0xa, "b52433a163b4ab1b040000000000000000000000020020000000000000b1fa321c2a59cc"}, 0x2f) ioctl$DMA_BUF_SET_NAME_A(r9, 0x40046201, &(0x7f0000000080)='\xde\xb6[i\xfe\xc1\xbc\x15\x8d\xc0\xd3\x11K*\xc09}P\xfd\xde\x8aX\xc6I\x04|y\x06h\r\xfe\x8d(\xc4\xd3\x83E\xe1oa\xab\xa5\xdc\xf8\x95\xbb~\xd7\x8b\xdb4\xe9k6\xa2n:\x8b\xc9\x10\xb88\xceP\xef\xd1\x9e\x8drF\xc2\xb8C\"\x8bLX\xbf`\xfaI\x1b\xd8\xaa\xce\x8b\xd1c\x9c\x95\xdf\xc3\x93[') mkdirat(r8, &(0x7f0000000000)='./file0\x00', 0x59) ioctl$LOOP_CONFIGURE(r8, 0x4c0a, &(0x7f0000000480)={r9, 0x0, {0x2a00, 0x80010000, 0x0, 0xa, 0x10000000000, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3e06e00d96072081000000000000002000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a03c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x6, 0x200000000]}}) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01002cbd70100400000005000000080009000200000008000c00a80a000008000b000000000006000100059333e638dba8726b0e58cf446520f7111f4a236ae14aad74b9692270fdfdda81113cf4bdfd24045495c6297130332b49ba9d013427857a4bfe53994d4768aa1cdd91a9160428067226c17200681678544d5b987ef6a6f5fedd553a25c5"], 0x34}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 4.919779945s ago: executing program 1 (id=2): socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ptrace(0x4207, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = epoll_create1(0x0) r2 = syz_open_dev$media(&(0x7f00000000c0), 0x103, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x2000001b}) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0xd0, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xa, 0x80000006, 0x400}, 0x0, 0x0) syz_emit_vhci(&(0x7f0000001800)=ANY=[@ANYBLOB="000e"], 0xf) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000040)=[@in={0x2, 0x4620, @initdev={0xac, 0x1e, 0xff, 0x0}}], 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f00000001c0)={r5, 0x9, 0x2c, 0x8}, &(0x7f0000000200)=0x10) syz_open_dev$media(&(0x7f0000000380), 0x0, 0x2000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) 4.82127447s ago: executing program 0 (id=1): socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) read$FUSE(0xffffffffffffffff, &(0x7f0000000880)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ptrace(0x4207, r0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = epoll_create1(0x0) syz_open_dev$media(&(0x7f00000000c0), 0x103, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x2000001b}) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xa, 0x80000006, 0x400}, 0x0, 0x0) syz_emit_vhci(&(0x7f0000001800)=ANY=[@ANYBLOB="000e"], 0xf) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000040)=[@in={0x2, 0x4620, @initdev={0xac, 0x1e, 0xff, 0x0}}], 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000001c0)={r4, 0x9, 0x2c, 0x8}, &(0x7f0000000200)=0x10) syz_open_dev$media(&(0x7f0000000380), 0x0, 0x2000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) 4.706825647s ago: executing program 2 (id=5): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r0, 0x40082102, &(0x7f0000000080)) socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x400c010) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r3, 0x8910, &(0x7f0000000000)={'dvmrp0\x00', @ifru_ivalue=0x7}) ioctl$sock_netdev_private(r3, 0x8949, &(0x7f0000000000)) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd00ac6700000000000000000000c2888e7d52164ec480e79200000100", [0x0, 0x2000000000001]}}) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0) r4 = syz_open_dev$video4linux(&(0x7f0000001380), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r4, 0xc0305602, &(0x7f0000000100)={0x0, 0x1, 0x201b, 0x1}) 4.417848308s ago: executing program 3 (id=6): io_uring_setup(0x664b, &(0x7f0000000500)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) syz_emit_ethernet(0x66, &(0x7f0000000000)={@broadcast, @random="6c7621d7cc94", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x30, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "98a350", 0x0, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x2}, @private1}}}}}}}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$dri(&(0x7f0000002580), 0x200, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r1, r1}, 0x4) r2 = syz_open_dev$dri(0x0, 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000003c0)={0x0, 0xfffffffffffffd6b}) iopl(0x3) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) shutdown(0xffffffffffffffff, 0x1) mknod$loop(&(0x7f000000db40)='./file0\x00', 0x1000, 0x0) openat2(0xffffffffffffff9c, &(0x7f0000001400)='./file0\x00', &(0x7f0000001440)={0x122240, 0x10b, 0x7}, 0x18) 2.870225249s ago: executing program 2 (id=7): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000000)=0xffffffffffffffff) ioctl$MEDIA_REQUEST_IOC_REINIT(r1, 0x7c81, 0x0) write$uinput_user_dev(r0, &(0x7f0000001b40)={'syz0\x00', {0x0, 0x0, 0x0, 0x2}, 0x0, [0x39, 0x3, 0x4000401, 0x8, 0xe, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2a, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xfffffffd, 0x10000000, 0x99, 0x20000000, 0x0, 0x0, 0xfffffffd, 0x0, 0x7fffffff, 0xfffffffc, 0x5, 0xfffffff6, 0x0, 0x8, 0x800000, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x1], [0x3, 0xfffff41a, 0x0, 0x0, 0x4, 0x20000, 0x2000000, 0xedc0, 0x0, 0x5ee, 0x5, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, 0x0, 0xfffffff8, 0x2, 0x0, 0x2, 0x400, 0x0, 0x0, 0x8, 0x40000, 0x0, 0xc0800000, 0x100, 0x0, 0xfffffffd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, 0xfffffffe, 0xfffff986], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x2, 0xfffffffc, 0x0, 0x0, 0xfffffffd, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x200, 0x2, 0x6, 0x80000000, 0x2, 0x47fff, 0x0, 0x0, 0x0, 0x3, 0x0, 0xf, 0x3, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4, 0xf88], [0xfffffffe, 0x0, 0x4, 0x0, 0xfffefffe, 0x0, 0xfffffffe, 0x4, 0xfffffffc, 0x0, 0x0, 0x3, 0xfffffffc, 0x4, 0x803, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x10, 0x5, 0xfffffffe, 0xfff, 0x8, 0x4, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xea, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0xffffffff, 0x0, 0x0, 0xffffe]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f00000000c0)={{0x0, 0x2f94, 0x80000001, 0x0, 0x2, 0x8, 0xfffffffffffffff9, 0xa04, 0xfffff7e3, 0x100, 0x4, 0x8, 0x6, 0x3, 0x85a}, 0x18, [0x0, 0x0, 0x0]}) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000005c0)=0x200000, 0x4) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f00000000c0)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffbffffa, 0x0, 0x0, 0x0, 0x40}, [@call={0x85, 0x0, 0x0, 0x11}]}, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0x0, 0x0, &(0x7f00000003c0), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r4}, 0x10) getsockopt$XDP_STATISTICS(r2, 0x11b, 0x7, &(0x7f00000003c0), &(0x7f0000000440)=0x30) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 2.632658826s ago: executing program 3 (id=8): socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) read$FUSE(0xffffffffffffffff, &(0x7f0000000880)={0x2020}, 0x2020) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = epoll_create1(0x0) r2 = syz_open_dev$media(&(0x7f00000000c0), 0x103, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x2000001b}) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0xd0, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xa, 0x80000006, 0x400}, 0x0, 0x0) syz_emit_vhci(&(0x7f0000001800)=ANY=[@ANYBLOB="000e"], 0xf) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000040)=[@in={0x2, 0x4620, @initdev={0xac, 0x1e, 0xff, 0x0}}], 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f00000001c0)={r5, 0x9, 0x2c, 0x8}, &(0x7f0000000200)=0x10) syz_open_dev$media(&(0x7f0000000380), 0x0, 0x2000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) 2.626585339s ago: executing program 0 (id=9): io_uring_setup(0x664b, &(0x7f0000000500)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) syz_emit_ethernet(0x67, &(0x7f0000000000)={@broadcast, @random="6c7621d7cc94", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "fec000", 0x31, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "98a350", 0x0, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x2}, @private1, [], "fa"}}}}}}}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$dri(&(0x7f0000002580), 0x200, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r1, r1}, 0x4) r2 = syz_open_dev$dri(0x0, 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000003c0)={0x0, 0xfffffffffffffd6b}) iopl(0x3) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) shutdown(0xffffffffffffffff, 0x1) mknod$loop(&(0x7f000000db40)='./file0\x00', 0x1000, 0x0) openat2(0xffffffffffffff9c, &(0x7f0000001400)='./file0\x00', &(0x7f0000001440)={0x122240, 0x10b, 0x7}, 0x18) 2.626433523s ago: executing program 1 (id=10): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r0, 0x40082102, &(0x7f0000000080)) socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x400c010) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r3, 0x8910, &(0x7f0000000000)={'dvmrp0\x00', @ifru_ivalue=0x7}) ioctl$sock_netdev_private(r3, 0x8949, &(0x7f0000000000)) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd00ac6700000000000000000000c2888e7d52164ec480e79200000100", [0x0, 0x2000000000001]}}) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0) r4 = syz_open_dev$video4linux(&(0x7f0000001380), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r4, 0xc0305602, &(0x7f0000000100)={0x0, 0x1, 0x201b, 0x1}) 942.001129ms ago: executing program 3 (id=11): add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa) syz_usb_connect(0x6, 0x134, &(0x7f0000000240)=ANY=[@ANYBLOB="12015002bd5d5440d219651065170102030109022201020a0340010904390604ffffff0409050904ff0306200e190141808fb548c4d43617000aae46aaf1a09c9eec1ce1da93f5712d221babba330aa76df40b6ed9360905050cff030708ff07250100045f0009058010ff030909b20725010c01000009050000000208020909040808021bce250109240600012f7150b105240001000d240f0108000000ff7f10004006241a0002300d240201ff0203076ac0a0651709050f08080008000907250104800500090506010004020400750b1d6a047b5b3540f7fb777f423f3db4b7bbe025556aa649fdfb28d2611f3e1ba8457d42807ba46619898e53aea9212251705824ddc07975ccc77ea2e4f1c7cededd349d24b4548c284666ba6aabfb71aa918edd5b0e388e09dd876d412ffbf8831d7e8d09d8d47d5993c0e305b965f3f5331810"], 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a8230800090400bc6435fb4d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f0000000080)="0000000000000002ff69000000000001000000c000000006000200861fa72e5b01504104bfeacdd5a9007d167c71e3b8a93aa64d957a684161c833020a6da8881fb79e110483bfadf224a22c76ecc7a56843a85f7df51293f0eb84ef8f0f07342db3b0e5a5647b7bed1fbf069ca713670adf7d9fb6d2600fd9c1981fe9f095cfe9d2fe1e1e34f6096bf02543747b2c792890f07c0da0fa25e6101062e6c917", 0x9f, 0xffffffffffffffff) r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x25ab, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, 0xffffffffffffffff}}, './file0\x00'}) sendmsg$nl_route(r1, 0x0, 0x60004010) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x8, 0x2, 0x1}) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x3, 0x2, 0x3, 0x0, 0xffffffffffffffff, 0x3}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) close(0x3) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x11, 0x0, 0x0, &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x61800, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4, r2}, 0xc) 937.171591ms ago: executing program 2 (id=12): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) read$FUSE(0xffffffffffffffff, &(0x7f0000000880)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ptrace(0x4207, r0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = epoll_create1(0x0) r3 = syz_open_dev$media(&(0x7f00000000c0), 0x103, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r3, 0x80047c05, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x2000001b}) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0xd0, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xa, 0x80000006, 0x400}, 0x0, 0x0) syz_emit_vhci(&(0x7f0000001800)=ANY=[@ANYBLOB="000e"], 0xf) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000040)=[@in={0x2, 0x4620, @initdev={0xac, 0x1e, 0xff, 0x0}}], 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000001c0)={r4, 0x9, 0x2c, 0x8}, &(0x7f0000000200)=0x10) syz_open_dev$media(&(0x7f0000000380), 0x0, 0x2000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) 929.529013ms ago: executing program 0 (id=13): r0 = socket$pppl2tp(0x18, 0x1, 0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) socket$netlink(0x10, 0x3, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x348, 0x160, 0x940c, 0x3002, 0x160, 0x2c0, 0x278, 0x3d8, 0x3d8, 0x278, 0x3d8, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private1, [0xffffff00, 0xffffff00, 0xffffffff], [0xffffffff, 0xff, 0xff000000, 0xff], 'geneve0\x00', 'veth1_to_bridge\x00', {}, {}, 0x84, 0x81, 0x2, 0x19}, 0x0, 0x100, 0x160, 0x0, {}, [@common=@frag={{0x30}, {[0x6, 0xfffe], 0x3, 0x2, 0x3}}, @inet=@rpfilter={{0x28}, {0x6}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@mcast2, [0x0, 0xffffffff, 0xff, 0xff], 0x4e24, 0x4e21, 0x4e24, 0x4e21, 0x81, 0x7, 0x33dd, 0x80000000}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, [0xff000000, 0xff, 0x0, 0xff000000], [0xffffff00, 0xffffffff, 0x0, 0xff000000], 'virt_wifi0\x00', 'pim6reg\x00', {0xff}, {0xff}, 0x32, 0x4, 0x2, 0x70}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xe}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@empty, 'ip6gre0\x00', {0x12}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a8) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, 0x0, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c80)=[{&(0x7f00000004c0)=ANY=[], 0x10}, {&(0x7f0000001ac0)=ANY=[@ANYBLOB="600000003840000225bd7000fcdb63ae0400718008", @ANYRES32=r3, @ANYBLOB="fd1acb113d49c104cdea935aeaefe2a14e413bd70e9dbe3e032b581dab9363c23c471f3daa9cb9dc2eb60319cfc3d5e90776c0fe9f00"], 0x60}], 0x2}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000400), 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r5, 0x40505331, &(0x7f0000000540)={{}, {0x18}, 0x0, 0x7}) getsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001cc0)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRESOCT=r5, @ANYBLOB="0536c95185b3350000000003000000000000000000005ee47cd7b1ab5e97aa4556a40339bc455b9c83c8c0f8090db1464423a96f18615d030073582fee353379cb1da7c091dcf6a6d89cf0d95bc5ef40d8e17a4b68deaa0fc18e9a54206109b93f6b4b2c5dbd96d25d736963a0209cef60485bcc1d395bea43660b46d03c0a68d6156183f3b1bfd60fa6c01fd630af9f500df613a5591c7ec054824b64b069cf6ac9800487ea355d9461405730a128f0dc69af9afdcccc153f874fde906727e53d9a1619e273ea", @ANYBLOB="1862f76422bc166bd690c1a3bc8877fa39f24c9fb544e8f4934b6951a5591f11f20c1d04fa188e2b364e1e226dade18e60b46a6f6b57a67b9c2e27a1ecd9b84520552882155016cb341af1377a63c9737bb02ca4d801c73f5fb90b30d118fdb60e7aeb90c47c27121061da23b072a819f14fab60a32b4bfb4d6240f88491f6be3b363b698e489fa4a273556d387f0c757cce2127b89ac4200f135d93e15f71caf1b1f8b0bd851c45f676aa962f2d930fa7d0c03f9a7acc2808e4c68261340f87751923e76dc20187358cb313f8373bad00718bdc9902f65dc7f016b68cf8de654560ad1371c973750bf9918c", @ANYRES8=r4], 0x70}, 0x1, 0x0, 0x0, 0x40}, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r8 = syz_open_dev$loop(&(0x7f0000000100), 0x9, 0x4000) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000001800)={'#! ', './file0', [{0x20, '\x1d'}, {0x20, '*@]'}, {0x20, '\xa0\xb3\x85\xe1up.stat\x00{\tcq\x9f\xaet\xe5nE(\xeb\xbd\xda0\xfb\xba\x0ed!Rh\xc0r\xc5\x13F\xc3\xe2\x1f\x17\xe2\x9d\xab\a\xe2\xba\xac\x1c\xc6\xf5\x84\xa4]\x93\x01\x1b\xfdE\x119\xc7\xdf4\xa56)SO\xa3yd{\xe8\xc0'}], 0xa, "b52433a163b4ab1b040000000000000000000000020020000000000000b1fa321c2a59cc"}, 0x83) ioctl$DMA_BUF_SET_NAME_A(r9, 0x40046201, &(0x7f0000000080)='\xde\xb6[i\xfe\xc1\xbc\x15\x8d\xc0\xd3\x11K*\xc09}P\xfd\xde\x8aX\xc6I\x04|y\x06h\r\xfe\x8d(\xc4\xd3\x83E\xe1oa\xab\xa5\xdc\xf8\x95\xbb~\xd7\x8b\xdb4\xe9k6\xa2n:\x8b\xc9\x10\xb88\xceP\xef\xd1\x9e\x8drF\xc2\xb8C\"\x8bLX\xbf`\xfaI\x1b\xd8\xaa\xce\x8b\xd1c\x9c\x95\xdf\xc3\x93[') mkdirat(r8, &(0x7f0000000000)='./file0\x00', 0x59) ioctl$LOOP_CONFIGURE(r8, 0x4c0a, &(0x7f0000000480)={r9, 0x0, {0x2a00, 0x80010000, 0x0, 0xa, 0x10000000000, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3e06e00d96072081000000000000002000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a03c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x6, 0x200000000]}}) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01002cbd70100400000005000000080009000200000008000c00a80a000008000b000000000006000100059333e638dba8726b0e58cf446520f7111f4a236ae14aad74b9692270fdfdda81113cf4bdfd24045495c6297130332b49ba9d013427857a4bfe53994d4768aa1cdd91a9160428067226c17200681678544d5b987ef6a6f5fedd553a25c5"], 0x34}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 920.446995ms ago: executing program 0 (id=14): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$pppoe(0x18, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) listen(0xffffffffffffffff, 0x5) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="10c7e3e7ea7a2c6faf870ee0859243c1d4249b84bcbfc4e3b9f5bdebf14121ee02bd1d30ba55170127766e5661a358ba11dce25f3f5395867eb4a6b402e56f1a7cd72c039a9b8739053a03ad84b82d5eaef327e3ef365e81813f0ad0136830898c4b8e0b44dd5928ec6e8eb1f3cd65dd0c584fcad887ad5b01347d9f8c9fa385d6cd4f362f92c284c6e83401e2328c50b46630eb9c6e9cc7f8adb62107058b0e85872f4144c6d57a4da519cc5504937976f9d56ea00ed19438c852", 0xbb) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r2 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0xfffffffffffffffe, 0x1, 0x4, 0x100000000, 0x5, 0x0, 0xe}, {0x0, 0xffffffff, 0x400000003, 0xfffffffffffffffc}, 0xfffffffc, 0x1, 0x1, 0x0, 0x6}, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x4, 0x3c}, 0x0, @in=@multicast2, 0x0, 0x0, 0x0, 0xb7, 0x7, 0xfffffffe}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x1c) 920.204812ms ago: executing program 1 (id=15): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000000)=0xffffffffffffffff) ioctl$MEDIA_REQUEST_IOC_REINIT(r1, 0x7c81, 0x0) write$uinput_user_dev(r0, &(0x7f0000001b40)={'syz0\x00', {0x0, 0x0, 0x0, 0x2}, 0x0, [0x39, 0x3, 0x4000401, 0x8, 0xe, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2a, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xfffffffd, 0x10000000, 0x99, 0x20000000, 0x0, 0x0, 0xfffffffd, 0x0, 0x7fffffff, 0xfffffffc, 0x5, 0xfffffff6, 0x0, 0x8, 0x800000, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x1], [0x3, 0xfffff41a, 0x0, 0x0, 0x4, 0x20000, 0x2000000, 0xedc0, 0x0, 0x5ee, 0x5, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, 0x0, 0xfffffff8, 0x2, 0x0, 0x2, 0x400, 0x0, 0x0, 0x8, 0x40000, 0x0, 0xc0800000, 0x100, 0x0, 0xfffffffd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, 0xfffffffe, 0xfffff986], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x2, 0xfffffffc, 0x0, 0x0, 0xfffffffd, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x200, 0x2, 0x6, 0x80000000, 0x2, 0x47fff, 0x0, 0x0, 0x0, 0x3, 0x0, 0xf, 0x3, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4, 0xf88], [0xfffffffe, 0x0, 0x4, 0x0, 0xfffefffe, 0x0, 0xfffffffe, 0x4, 0xfffffffc, 0x0, 0x0, 0x3, 0xfffffffc, 0x4, 0x803, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x10, 0x5, 0xfffffffe, 0xfff, 0x8, 0x4, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xea, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0xffffffff, 0x0, 0x0, 0xffffe]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f00000000c0)={{0x0, 0x2f94, 0x80000001, 0x0, 0x2, 0x8, 0xfffffffffffffff9, 0xa04, 0xfffff7e3, 0x100, 0x4, 0x8, 0x6, 0x3, 0x85a}, 0x18, [0x0, 0x0, 0x0]}) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000005c0)=0x200000, 0x4) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f00000000c0)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000400)={'dummy0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffbffffa, 0x0, 0x0, 0x0, 0x40}, [@call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0x0, 0x0, &(0x7f00000003c0), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r2, 0x0, 0x0) getsockopt$XDP_STATISTICS(r2, 0x11b, 0x7, &(0x7f00000003c0), &(0x7f0000000440)=0x30) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 911.602486ms ago: executing program 1 (id=16): socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) read$FUSE(0xffffffffffffffff, &(0x7f0000000880)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ptrace(0x4207, r0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = epoll_create1(0x0) r3 = syz_open_dev$media(&(0x7f00000000c0), 0x103, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r3, 0x80047c05, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x2000001b}) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0xd0, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xa, 0x80000006, 0x400}, 0x0, 0x0) syz_emit_vhci(&(0x7f0000001800)=ANY=[@ANYBLOB="000e"], 0xf) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000040)=[@in={0x2, 0x4620, @initdev={0xac, 0x1e, 0xff, 0x0}}], 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000001c0)={r4, 0x9, 0x2c, 0x8}, &(0x7f0000000200)=0x10) syz_open_dev$media(&(0x7f0000000380), 0x0, 0x2000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) 13.192724ms ago: executing program 3 (id=17): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r0, 0x40082102, &(0x7f0000000080)) socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x400c010) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r3, 0x8910, &(0x7f0000000000)={'dvmrp0\x00', @ifru_ivalue=0x7}) ioctl$sock_netdev_private(r3, 0x8949, &(0x7f0000000000)) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd00ac6700000000000000000000c2888e7d52164ec480e79200000100", [0x0, 0x2000000000001]}}) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0) r4 = syz_open_dev$video4linux(&(0x7f0000001380), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r4, 0xc0305602, &(0x7f0000000100)={0x0, 0x1, 0x201b, 0x1}) 181.865µs ago: executing program 0 (id=18): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$pppoe(0x18, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) listen(0xffffffffffffffff, 0x5) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="10c7e3e7ea7a2c6faf870ee0859243c1d4249b84bcbfc4e3b9f5bdebf14121ee02bd1d30ba55170127766e5661a358ba11dce25f3f5395867eb4a6b402e56f1a7cd72c039a9b8739053a03ad84b82d5eaef327e3ef365e81813f0ad0136830898c4b8e0b44dd5928ec6e8eb1f3cd65dd0c584fcad887ad5b01347d9f8c9fa385d6cd4f362f92c284c6e83401e2328c50b46630eb9c6e9cc7f8adb62107058b0e85872f4144c6d57a4da519cc5504937976f9d56ea00ed19438c852284400d15537", 0xc1) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r2 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@remote, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0xfffffffffffffffe, 0x1, 0x4, 0x100000000, 0x5, 0x0, 0xe}, {0x0, 0xffffffff, 0x400000003, 0xfffffffffffffffc}, 0xfffffffc, 0x1, 0x1, 0x0, 0x6}, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x4, 0x3c}, 0x0, @in=@multicast2, 0x0, 0x0, 0x0, 0xb7, 0x7, 0xfffffffe}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x1c) 0s ago: executing program 2 (id=19): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x1, 0x4, 0x8, 0xb}, 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) r3 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x82) fchdir(r4) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000840)={0x48, 0x1, 0x8, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_OPEN={0x8, 0x4, 0x1, 0x0, 0x10}, @CTA_TIMEOUT_DCCP_PARTOPEN={0x8, 0x3, 0x1, 0x0, 0x101}, @CTA_TIMEOUT_DCCP_PARTOPEN={0x8, 0x3, 0x1, 0x0, 0xc}, @CTA_TIMEOUT_DCCP_REQUEST={0x8, 0x1, 0x1, 0x0, 0x6104}, @CTA_TIMEOUT_DCCP_RESPOND={0x8, 0x2, 0x1, 0x0, 0x5}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x20000000) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x24, 0x29, 0xa19702d202eff97b, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x9, 0x14, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', r2, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r5 = inotify_init() inotify_add_watch(r5, &(0x7f0000000340)='.\x00', 0xa50003d1) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000100)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r6, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000080)='./bus\x00', 0xc000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:27598' (ED25519) to the list of known hosts. [ 41.908517][ T5655] cgroup: Unknown subsys name 'net' [ 42.031355][ T5655] cgroup: Unknown subsys name 'cpuset' [ 42.035433][ T5655] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 42.885401][ T5655] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 46.458856][ T5744] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 46.462959][ T5744] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 46.487030][ T5755] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 46.490202][ T5755] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 46.493423][ T5754] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 46.497284][ T5754] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 46.497646][ T5755] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 46.500758][ T5758] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 46.501153][ T5756] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 46.502401][ T5756] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 46.503536][ T5757] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 46.504185][ T5757] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 46.505043][ T5757] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 46.505169][ T5758] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 46.505558][ T5758] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 46.513404][ T5755] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 46.514312][ T5757] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 46.517481][ T5102] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 46.525697][ T5757] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 46.531734][ T5757] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 47.029850][ T5741] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.032721][ T5741] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.034996][ T5741] bridge_slave_0: entered allmulticast mode [ 47.039925][ T5741] bridge_slave_0: entered promiscuous mode [ 47.058403][ T5741] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.060840][ T5741] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.063139][ T5741] bridge_slave_1: entered allmulticast mode [ 47.065741][ T5741] bridge_slave_1: entered promiscuous mode [ 47.098601][ T5745] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.101096][ T5745] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.103421][ T5745] bridge_slave_0: entered allmulticast mode [ 47.106089][ T5745] bridge_slave_0: entered promiscuous mode [ 47.109437][ T5745] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.111710][ T5745] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.114002][ T5745] bridge_slave_1: entered allmulticast mode [ 47.117564][ T5745] bridge_slave_1: entered promiscuous mode [ 47.168607][ T5741] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.173007][ T5741] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.208115][ T5745] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.211025][ T5746] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.213794][ T5746] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.216135][ T5746] bridge_slave_0: entered allmulticast mode [ 47.219003][ T5746] bridge_slave_0: entered promiscuous mode [ 47.222249][ T5746] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.224493][ T5746] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.227226][ T5746] bridge_slave_1: entered allmulticast mode [ 47.229797][ T5746] bridge_slave_1: entered promiscuous mode [ 47.239033][ T5748] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.241207][ T5748] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.243419][ T5748] bridge_slave_0: entered allmulticast mode [ 47.246085][ T5748] bridge_slave_0: entered promiscuous mode [ 47.250703][ T5745] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.271951][ T5748] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.274721][ T5748] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.278125][ T5748] bridge_slave_1: entered allmulticast mode [ 47.281462][ T5748] bridge_slave_1: entered promiscuous mode [ 47.296988][ T5741] team0: Port device team_slave_0 added [ 47.305305][ T5745] team0: Port device team_slave_0 added [ 47.308626][ T5745] team0: Port device team_slave_1 added [ 47.314733][ T5746] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.318679][ T5741] team0: Port device team_slave_1 added [ 47.336929][ T5748] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.340847][ T5746] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.357463][ T5748] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.368871][ T5741] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.371182][ T5741] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.379628][ T5741] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.384596][ T5741] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.386822][ T5741] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.395001][ T5741] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.398902][ T5745] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.401345][ T5745] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.409583][ T5745] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.439468][ T5745] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.442102][ T5745] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.450028][ T5745] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.457815][ T5748] team0: Port device team_slave_0 added [ 47.461223][ T5746] team0: Port device team_slave_0 added [ 47.464360][ T5746] team0: Port device team_slave_1 added [ 47.475011][ T5748] team0: Port device team_slave_1 added [ 47.512785][ T5745] hsr_slave_0: entered promiscuous mode [ 47.515189][ T5745] hsr_slave_1: entered promiscuous mode [ 47.520402][ T5741] hsr_slave_0: entered promiscuous mode [ 47.522634][ T5741] hsr_slave_1: entered promiscuous mode [ 47.524663][ T5741] debugfs: 'hsr0' already exists in 'hsr' [ 47.526434][ T5741] Cannot create hsr debugfs directory [ 47.534354][ T5746] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.536591][ T5746] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.544432][ T5746] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.549060][ T5746] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.551168][ T5746] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.558876][ T5746] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.562690][ T5748] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.564864][ T5748] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.572822][ T5748] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.577497][ T5748] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.579875][ T5748] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.587703][ T5748] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.681427][ T5748] hsr_slave_0: entered promiscuous mode [ 47.683727][ T5748] hsr_slave_1: entered promiscuous mode [ 47.685737][ T5748] debugfs: 'hsr0' already exists in 'hsr' [ 47.688078][ T5748] Cannot create hsr debugfs directory [ 47.706767][ T5746] hsr_slave_0: entered promiscuous mode [ 47.708991][ T5746] hsr_slave_1: entered promiscuous mode [ 47.710981][ T5746] debugfs: 'hsr0' already exists in 'hsr' [ 47.712745][ T5746] Cannot create hsr debugfs directory [ 47.903505][ T5741] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 47.911500][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 47.924194][ T5741] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 47.929202][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 47.931896][ T5741] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 47.935780][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 47.944372][ T5741] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 47.948774][ T5741] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 47.978151][ T5745] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 47.983429][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 47.993426][ T5745] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 47.997630][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.000233][ T5745] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 48.003903][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.013625][ T5745] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 48.018093][ T5745] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.045207][ T5748] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 48.050337][ T5748] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.053815][ T5748] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 48.057802][ T5748] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.060399][ T5748] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 48.064671][ T5748] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.070038][ T5748] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 48.073833][ T5748] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.132854][ T5746] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 48.138866][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.149303][ T5746] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 48.153889][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.157910][ T5746] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 48.162075][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.169443][ T5746] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 48.174768][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.185455][ T5741] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.211249][ T5741] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.226504][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.229120][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.247280][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.249608][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.264772][ T5745] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.277813][ T5748] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.302084][ T5745] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.320136][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.322409][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.328192][ T5748] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.338877][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.341263][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.349069][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.351823][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.377707][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.380403][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.391068][ T5746] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.419661][ T5746] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.428618][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.430888][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.449805][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.452129][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.538046][ T5757] Bluetooth: hci0: command tx timeout [ 48.538053][ T5744] Bluetooth: hci3: command tx timeout [ 48.546938][ T5757] Bluetooth: hci1: command tx timeout [ 48.546954][ T5744] Bluetooth: hci2: command tx timeout [ 48.617242][ T5741] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.655190][ T5741] veth0_vlan: entered promiscuous mode [ 48.675065][ T5741] veth1_vlan: entered promiscuous mode [ 48.683205][ T5745] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.703622][ T5741] veth0_macvtap: entered promiscuous mode [ 48.713362][ T5741] veth1_macvtap: entered promiscuous mode [ 48.735005][ T5745] veth0_vlan: entered promiscuous mode [ 48.743431][ T5746] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.749251][ T5748] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.762942][ T5741] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.772658][ T5745] veth1_vlan: entered promiscuous mode [ 48.781111][ T5741] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.799421][ T46] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.802771][ T46] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.817282][ T46] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.820025][ T46] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.850770][ T5746] veth0_vlan: entered promiscuous mode [ 48.853633][ T5745] veth0_macvtap: entered promiscuous mode [ 48.859618][ T5748] veth0_vlan: entered promiscuous mode [ 48.871884][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.872261][ T5746] veth1_vlan: entered promiscuous mode [ 48.874893][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.881826][ T5745] veth1_macvtap: entered promiscuous mode [ 48.892421][ T5748] veth1_vlan: entered promiscuous mode [ 48.911268][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.914162][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.916137][ T5745] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.928823][ T5745] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.938939][ T5746] veth0_macvtap: entered promiscuous mode [ 48.945814][ T5748] veth0_macvtap: entered promiscuous mode [ 48.949367][ T46] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.952693][ T46] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.959412][ T5746] veth1_macvtap: entered promiscuous mode [ 48.960883][ T5741] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 48.963155][ T5748] veth1_macvtap: entered promiscuous mode [ 48.969688][ T46] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.972467][ T46] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.999460][ T5748] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.004046][ T5746] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.026015][ T5748] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.037730][ T5746] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.054119][ T219] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.062936][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.066512][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.075416][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.078084][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.082743][ T219] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.085993][ T219] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.101221][ T219] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.107175][ T219] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.116938][ T219] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.158400][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.163968][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.206759][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.209882][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.282489][ T219] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.290338][ T219] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.432452][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.440077][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.456200][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.469350][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.567670][ T5750] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 50.666378][ T5744] Bluetooth: hci2: command tx timeout [ 50.677357][ T5744] Bluetooth: hci3: command tx timeout [ 50.690842][ T5744] Bluetooth: hci1: command tx timeout [ 50.704219][ T5744] Bluetooth: hci0: command tx timeout [ 50.761895][ T40] audit: type=1326 audit(1781010695.109:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5902 comm="syz.2.5" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f03f7c code=0x7fc00000 [ 51.101332][ T5918] input: syz0 as /devices/virtual/input/input5 [ 52.487342][ T5931] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 52.624077][ T40] audit: type=1326 audit(1781010696.969:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5943 comm="syz.1.10" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f75f7c code=0x7fc00000 [ 52.778929][ T62] Bluetooth: hci1: command tx timeout [ 52.778967][ T5744] Bluetooth: hci0: command tx timeout [ 52.778997][ T5744] Bluetooth: hci3: command tx timeout [ 52.780800][ T62] Bluetooth: hci2: command tx timeout [ 52.916773][ T5846] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 53.070693][ T5846] usb 8-1: Using ep0 maxpacket: 8 [ 53.081229][ T5967] input: syz0 as /devices/virtual/input/input6 [ 53.093737][ T5846] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 53.098586][ T5846] usb 8-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 53.110440][ T5846] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 53.119761][ T5846] usb 8-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 53.127426][ T5846] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 53.135473][ T5846] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 53.144815][ T5846] usb 8-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 53.155522][ T5846] usb 8-1: config 168 interface 0 has no altsetting 0 [ 53.170998][ T5846] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 53.173774][ T5846] usb 8-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 53.190732][ T5846] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 53.211433][ T5846] usb 8-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 53.248967][ T5846] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 53.275196][ T5846] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 53.295520][ T5846] usb 8-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 53.311396][ T5846] usb 8-1: config 168 interface 0 has no altsetting 0 [ 53.347545][ T5846] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 53.421760][ T5846] usb 8-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 53.443559][ T5846] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 53.463056][ T5846] usb 8-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 53.474201][ T5846] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 53.486749][ T5846] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 53.497545][ T5846] usb 8-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 53.513925][ T5846] usb 8-1: config 168 interface 0 has no altsetting 0 [ 53.525208][ T5750] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 53.526169][ T5846] usb 8-1: string descriptor 0 read error: -22 [ 53.529436][ T5846] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 53.531070][ T5750] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 53.532267][ T5846] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.564674][ T5846] adutux 8-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 53.783854][ T5953] Zero length message leads to an empty skb [ 53.808950][ T5931] usb 8-1: USB disconnect, device number 2 [ 54.752681][ T6010] input: syz0 as /devices/virtual/input/input7 [ 54.782466][ T167] ref_tracker: reference already released. [ 54.785163][ T167] ref_tracker: allocated in: [ 54.787071][ T167] netdev_watchdog_up+0x183/0x210 [ 54.789186][ T167] netif_carrier_on+0xfc/0x120 [ 54.791147][ T167] e1000_watchdog.cold+0x2a3/0x449 [ 54.793282][ T167] process_one_work+0xa0e/0x1980 [ 54.795129][ T167] worker_thread+0x5ef/0xe50 [ 54.796663][ T167] kthread+0x370/0x450 [ 54.798352][ T167] ret_from_fork+0x72b/0xd50 [ 54.800121][ T167] ret_from_fork_asm+0x1a/0x30 [ 54.802121][ T167] ref_tracker: freed in: [ 54.803894][ T167] dev_deactivate_many+0x293/0xff0 [ 54.806000][ T167] dev_deactivate+0x109/0x1d0 [ 54.807977][ T167] linkwatch_do_dev+0xd3/0x120 [ 54.809977][ T167] __linkwatch_run_queue+0x3a9/0x900 [ 54.812194][ T167] linkwatch_event+0x8f/0xc0 [ 54.814127][ T167] process_one_work+0xa0e/0x1980 [ 54.816355][ T167] worker_thread+0x5ef/0xe50 [ 54.818303][ T167] kthread+0x370/0x450 [ 54.820050][ T167] ret_from_fork+0x72b/0xd50 [ 54.821972][ T167] ret_from_fork_asm+0x1a/0x30 [ 54.824570][ T167] ------------[ cut here ]------------ [ 54.827765][ T167] 1 [ 54.827775][ T167] WARNING: lib/ref_tracker.c:322 at ref_tracker_free.cold+0x116/0x154, CPU#3: kworker/u32:6/167 [ 54.833090][ T167] Modules linked in: [ 54.834904][ T167] CPU: 3 UID: 0 PID: 167 Comm: kworker/u32:6 Not tainted syzkaller #0 PREEMPT(full) [ 54.838696][ T167] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 54.842675][ T167] Workqueue: events_unbound linkwatch_event [ 54.844554][ T167] RIP: 0010:ref_tracker_free.cold+0x116/0x154 [ 54.846431][ T167] Code: 48 c1 e0 2a 0f b6 04 02 84 c0 74 04 3c 03 7e 4e 8b 7b 18 e8 f6 cb f4 03 e8 81 84 d0 00 48 8b 34 24 48 89 ef e8 95 59 52 0a 90 <0f> 0b 90 bb ea ff ff ff e9 10 f6 f4 03 4c 89 f7 e8 af 71 3d 01 e9 [ 54.854289][ T167] RSP: 0000:ffffc90002167880 EFLAGS: 00010202 [ 54.856493][ T167] RAX: 0000000000000201 RBX: ffff888023ce5380 RCX: 0000000000000000 [ 54.858978][ T167] RDX: 0000000000000202 RSI: ffffffff8df1ae4d RDI: 0000000000000001 [ 54.861411][ T167] RBP: ffff88802166c658 R08: 0000000000000001 R09: 0000000000000000 [ 54.863852][ T167] R10: 0000000000000001 R11: 0000000000000000 R12: 1ffff9200042cf12 [ 54.866356][ T167] R13: ffffc900021678b0 R14: ffff888023ce5398 R15: 00000000031602f4 [ 54.868870][ T167] FS: 0000000000000000(0000) GS:ffff88809748e000(0000) knlGS:0000000000000000 [ 54.871611][ T167] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 54.873652][ T167] CR2: 000000008000b01c CR3: 0000000070ff5000 CR4: 0000000000352ef0 [ 54.876089][ T167] Call Trace: [ 54.877190][ T167] [ 54.878121][ T167] ? __pfx_ref_tracker_free+0x10/0x10 [ 54.879783][ T167] ? dev_deactivate_many+0x293/0xff0 [ 54.881415][ T167] ? dev_deactivate+0x109/0x1d0 [ 54.882952][ T167] ? linkwatch_do_dev+0xd3/0x120 [ 54.884485][ T167] ? __linkwatch_run_queue+0x3a9/0x900 [ 54.886162][ T167] ? linkwatch_event+0x8f/0xc0 [ 54.887703][ T167] ? process_one_work+0xa0e/0x1980 [ 54.889296][ T167] ? worker_thread+0x5ef/0xe50 [ 54.890770][ T167] ? kthread+0x370/0x450 [ 54.892125][ T167] ? ret_from_fork+0x72b/0xd50 [ 54.893604][ T167] ? ret_from_fork_asm+0x1a/0x30 [ 54.895134][ T167] ? netif_freeze_queues+0x183/0x1f0 [ 54.896804][ T167] dev_deactivate_many+0x293/0xff0 [ 54.898379][ T167] ? __pfx_dev_deactivate_many+0x10/0x10 [ 54.900111][ T167] ? __pfx___schedule+0x10/0x10 [ 54.901611][ T167] ? trace_reschedule_exit.constprop.0+0x6b/0x220 [ 54.903598][ T167] dev_deactivate+0x109/0x1d0 [ 54.905037][ T167] ? __pfx_dev_deactivate+0x10/0x10 [ 54.906681][ T167] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 54.908533][ T167] linkwatch_do_dev+0xd3/0x120 [ 54.910026][ T167] __linkwatch_run_queue+0x3a9/0x900 [ 54.911662][ T167] ? __pfx___linkwatch_run_queue+0x10/0x10 [ 54.913435][ T167] linkwatch_event+0x8f/0xc0 [ 54.914846][ T167] ? __pfx_linkwatch_event+0x10/0x10 [ 54.916455][ T167] ? rcu_is_watching+0x12/0xc0 [ 54.917959][ T167] process_one_work+0xa0e/0x1980 [ 54.919487][ T167] ? __pfx_process_one_work+0x10/0x10 [ 54.921128][ T167] ? __pfx_linkwatch_event+0x10/0x10 [ 54.922781][ T167] worker_thread+0x5ef/0xe50 [ 54.924231][ T167] ? kthread+0x13a/0x450 [ 54.925549][ T167] ? __pfx_worker_thread+0x10/0x10 [ 54.927177][ T167] kthread+0x370/0x450 [ 54.928466][ T167] ? __pfx_kthread+0x10/0x10 [ 54.929916][ T167] ret_from_fork+0x72b/0xd50 [ 54.931345][ T167] ? __pfx_ret_from_fork+0x10/0x10 [ 54.932938][ T167] ? __switch_to+0x800/0x1100 [ 54.934389][ T167] ? __pfx_kthread+0x10/0x10 [ 54.935823][ T167] ret_from_fork_asm+0x1a/0x30 [ 54.937373][ T167] [ 54.938344][ T167] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 54.940557][ T167] CPU: 3 UID: 0 PID: 167 Comm: kworker/u32:6 Not tainted syzkaller #0 PREEMPT(full) [ 54.943404][ T167] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 54.946539][ T167] Workqueue: events_unbound linkwatch_event [ 54.948377][ T167] Call Trace: [ 54.949432][ T167] [ 54.950349][ T167] dump_stack_lvl+0x100/0x190 [ 54.951805][ T167] vpanic+0x552/0x970 [ 54.953064][ T167] ? __pfx_vpanic+0x10/0x10 [ 54.954470][ T167] panic+0xd1/0xe0 [ 54.955669][ T167] ? __pfx_panic+0x10/0x10 [ 54.957059][ T167] ? check_panic_on_warn+0x1f/0x90 [ 54.958639][ T167] check_panic_on_warn.cold+0x19/0x34 [ 54.960306][ T167] ? ref_tracker_free.cold+0x116/0x154 [ 54.962000][ T167] __warn.cold+0x191/0x328 [ 54.963386][ T167] __report_bug+0x296/0x3d0 [ 54.964823][ T167] ? ref_tracker_free.cold+0x116/0x154 [ 54.966521][ T167] ? __pfx___report_bug+0x10/0x10 [ 54.968063][ T167] ? find_held_lock+0x2b/0x80 [ 54.969538][ T167] ? __hrtimer_rearm_deferred+0x24d/0x740 [ 54.971296][ T167] ? __hrtimer_rearm_deferred+0x24d/0x740 [ 54.973073][ T167] ? mark_held_locks+0x40/0x70 [ 54.974571][ T167] ? ref_tracker_free.cold+0x116/0x154 [ 54.976287][ T167] report_bug+0xb2/0x220 [ 54.977607][ T167] ? ref_tracker_free.cold+0x116/0x154 [ 54.979254][ T167] handle_bug+0x16a/0x2a0 [ 54.980636][ T167] exc_invalid_op+0x17/0x50 [ 54.982063][ T167] asm_exc_invalid_op+0x1a/0x20 [ 54.983613][ T167] RIP: 0010:ref_tracker_free.cold+0x116/0x154 [ 54.985505][ T167] Code: 48 c1 e0 2a 0f b6 04 02 84 c0 74 04 3c 03 7e 4e 8b 7b 18 e8 f6 cb f4 03 e8 81 84 d0 00 48 8b 34 24 48 89 ef e8 95 59 52 0a 90 <0f> 0b 90 bb ea ff ff ff e9 10 f6 f4 03 4c 89 f7 e8 af 71 3d 01 e9 [ 54.991540][ T167] RSP: 0000:ffffc90002167880 EFLAGS: 00010202 [ 54.993489][ T167] RAX: 0000000000000201 RBX: ffff888023ce5380 RCX: 0000000000000000 [ 54.996017][ T167] RDX: 0000000000000202 RSI: ffffffff8df1ae4d RDI: 0000000000000001 [ 54.998822][ T167] RBP: ffff88802166c658 R08: 0000000000000001 R09: 0000000000000000 [ 55.001262][ T167] R10: 0000000000000001 R11: 0000000000000000 R12: 1ffff9200042cf12 [ 55.003877][ T167] R13: ffffc900021678b0 R14: ffff888023ce5398 R15: 00000000031602f4 [ 55.006537][ T167] ? __pfx_ref_tracker_free+0x10/0x10 [ 55.008219][ T167] ? dev_deactivate_many+0x293/0xff0 [ 55.009858][ T167] ? dev_deactivate+0x109/0x1d0 [ 55.011377][ T167] ? linkwatch_do_dev+0xd3/0x120 [ 55.012957][ T167] ? __linkwatch_run_queue+0x3a9/0x900 [ 55.014640][ T167] ? linkwatch_event+0x8f/0xc0 [ 55.016147][ T167] ? process_one_work+0xa0e/0x1980 [ 55.017741][ T167] ? worker_thread+0x5ef/0xe50 [ 55.019223][ T167] ? kthread+0x370/0x450 [ 55.020574][ T167] ? ret_from_fork+0x72b/0xd50 [ 55.022091][ T167] ? ret_from_fork_asm+0x1a/0x30 [ 55.023653][ T167] ? netif_freeze_queues+0x183/0x1f0 [ 55.025294][ T167] dev_deactivate_many+0x293/0xff0 [ 55.026888][ T167] ? __pfx_dev_deactivate_many+0x10/0x10 [ 55.028652][ T167] ? __pfx___schedule+0x10/0x10 [ 55.030160][ T167] ? trace_reschedule_exit.constprop.0+0x6b/0x220 [ 55.032173][ T167] dev_deactivate+0x109/0x1d0 [ 55.033680][ T167] ? __pfx_dev_deactivate+0x10/0x10 [ 55.035344][ T167] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 55.037500][ T167] linkwatch_do_dev+0xd3/0x120 [ 55.039063][ T167] __linkwatch_run_queue+0x3a9/0x900 [ 55.040753][ T167] ? __pfx___linkwatch_run_queue+0x10/0x10 [ 55.042593][ T167] linkwatch_event+0x8f/0xc0 [ 55.044086][ T167] ? __pfx_linkwatch_event+0x10/0x10 [ 55.045725][ T167] ? rcu_is_watching+0x12/0xc0 [ 55.047218][ T167] process_one_work+0xa0e/0x1980 [ 55.048772][ T167] ? __pfx_process_one_work+0x10/0x10 [ 55.050618][ T167] ? __pfx_linkwatch_event+0x10/0x10 [ 55.052319][ T167] worker_thread+0x5ef/0xe50 [ 55.053729][ T167] ? kthread+0x13a/0x450 [ 55.055071][ T167] ? __pfx_worker_thread+0x10/0x10 [ 55.056674][ T167] kthread+0x370/0x450 [ 55.057956][ T167] ? __pfx_kthread+0x10/0x10 [ 55.059404][ T167] ret_from_fork+0x72b/0xd50 [ 55.061208][ T167] ? __pfx_ret_from_fork+0x10/0x10 [ 55.062863][ T167] ? __switch_to+0x800/0x1100 [ 55.064352][ T167] ? __pfx_kthread+0x10/0x10 [ 55.065819][ T167] ret_from_fork_asm+0x1a/0x30 [ 55.067324][ T167] [ 55.069046][ T167] Kernel Offset: disabled [ 55.070399][ T167] Rebooting in 86400 seconds..