last executing test programs: 4.168834945s ago: executing program 3 (id=77): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') syz_clone3(&(0x7f00000023c0)={0x400000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) syz_genetlink_get_family_id$gtp(&(0x7f0000002080), r0) read$FUSE(r0, &(0x7f0000000040)={0x2020}, 0x2020) 4.078804412s ago: executing program 3 (id=78): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[@ANYBLOB="92a0a5986140d3dc595800000042000100000000000000000003010000000000002600010000112200140000000001170000010203040506070800000c00020006000600080000000c00030008000c0004000600"/97], 0x58}}, 0x0) syz_open_procfs(0x0, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000000)=0x200000000) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010101, 0x4e21, 0x83, 'lc\x00', 0x11, 0x3240, 0x3d}, {@loopback, 0x4e23, 0x0, 0x8628, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_DELDEST(r1, 0x0, 0x488, &(0x7f0000000280)={{0x84, @empty, 0x4e20, 0x3, 'lblc\x00', 0x1d, 0x2, 0x2a}, {@loopback, 0x4e23, 0x10000, 0xc24, 0x9, 0xfffffffc}}, 0x44) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x5, 0x7fff7ffc}]}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000080)=0x33) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x3c, r5, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x39}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48014}, 0x4000000) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000180)={0x0, 0x0, r3, 0x800005, 0x80000}) accept4$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000000c0)=0x1c, 0x800) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') preadv(r3, &(0x7f00000001c0), 0x0, 0x4007, 0xedcd) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000006080)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r7, {0x4, 0x8001}, {}, {0xa, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x6, 0xd}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2002c805}, 0x20000054) r8 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_CLEAR_DIRTY_LOG(r8, 0xc018aec0, &(0x7f0000000600)={0x0, 0x7, 0x180, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'wpan3\x00'}) sendmsg$NL802154_CMD_NEW_SEC_DEV(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000580)={&(0x7f0000000240)={0x28, r9, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4044011}, 0x80) 4.078450106s ago: executing program 0 (id=79): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000180), 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x1c, &(0x7f0000000b00)=ANY=[@ANYBLOB="58485dba85ad910742021610d1f26a5f6797b2e10b9e5df2e03644b90104bc843094ab29032ac148e57930c886a64e7bbb4c6000", @ANYBLOB="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"], 0x0, 0x8}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448d4, &(0x7f0000000040)={0x1, 0x3f, "f8ff00", 0xff, 0x3}) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, 0x0, &(0x7f0000000600)) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x380}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_OPER(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0108000300"/18, @ANYRES32=0x0, @ANYBLOB="0c0099000100000001000000"], 0x28}}, 0x0) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x3, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xe) r5 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) ioctl$PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xe4, 0x2, 0x0, 0x2}) getsockopt$inet6_tcp_int(r2, 0x6, 0x1e, &(0x7f00000001c0), &(0x7f00000003c0)=0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./myconfig\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./myconfig\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./myconfig/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000400)='./myconfig/usb_gadget/g1/functions/uac2.usb0/p_srate\x00', 0x1, 0x0) write(0xffffffffffffffff, &(0x7f0000000440)='44100,48000,88200,96000,176400,192000,352', 0x29) symlinkat(&(0x7f0000000580)='./myconfig/usb_gadget/g1/functions/uac2.usb0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./myconfig/usb_gadget/g1/configs/c.1/uac2.usb0\x00') write(0xffffffffffffffff, &(0x7f0000000640)='usbip-vudc.0', 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) 3.949369432s ago: executing program 0 (id=80): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[], 0x48) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e045f2d20"], 0x7) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='\x00', @ANYRES16=r0, @ANYBLOB="040026bd7000fcdbdf250f000000080031000200000008003400000000"], 0x2c}, 0x1, 0x0, 0x0, 0x8841}, 0x4008041) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = dup(0xffffffffffffffff) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_user_confirm_req={{0x33, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}}}, 0xd) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$MRT6_DEL_MFC(r1, 0x29, 0xcd, &(0x7f0000000080)={{0xa, 0x4e22, 0xffff26c0, @loopback, 0x28}, {0xa, 0x4e22, 0x5, @mcast1}, 0x0, {[0x8, 0x8, 0x101, 0x8, 0x1, 0x200, 0x8, 0x6]}}, 0x5c) r3 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r3, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r3, 0xda90) accept4(r3, 0x0, 0x0, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000000)=@req3={0x1, 0x8, 0x7, 0x4, 0xf8b, 0x1, 0x80}, 0x1c) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$sock_buf(r5, 0x1, 0x1c, 0x0, &(0x7f0000001600)) setns(0xc9, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x14, 0x30, 0xffff}, 0x14}}, 0x80c0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) 3.448606092s ago: executing program 3 (id=82): socket$nl_sock_diag(0x10, 0x3, 0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x6a, 0x4) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000180)=0xb27, 0x4) connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) sendmmsg(r0, &(0x7f0000004fc0)=[{{0x0, 0x0, &(0x7f0000002e40)=[{&(0x7f0000000500)="26ef26da06fcc43959ccc53ee926b47804ba3281fcac63bf954c857621deb501478081", 0x23}, {&(0x7f0000001c40)="65e3d6347d4e5a56100bf4c4f9e05214c8f2d4656aea29151d3ca7f936d66855822d51bf7deed302d625ab319825893b4a84e477c08f8f7afbc81b14", 0x3c}], 0x2}}], 0x1, 0xc840) sendto$inet(r0, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c9702", 0x5e, 0x5e, 0x0, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000005000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYRES16=r2, @ANYBLOB="010000000000fbdbdf25010000000800020000000000050005000000000008000300010000004800018005000200200000000600010002000000080006000a000000080003"], 0x84}}, 0x0) r3 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a00)=@newtaction={0xeb0, 0x30, 0xb, 0x0, 0x0, {}, [{0xe9c, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80006}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0xe50, 0x2, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x5, 0xa, 0x4, 0x1, 0x2000000}, 0x5, 0x1}, [{0x9, 0x80000001, 0x1, 0x630, 0x8, 0x1}, {0xdf, 0x4, 0x5, 0x5, 0x10, 0xe}, {0x1, 0x85a, 0x5, 0xe6db, 0x3, 0xfffffffc}, {0x6, 0x400, 0x9321, 0x9, 0x6, 0x7}, {0x5, 0x5, 0xffffffc0, 0x0, 0x3}, {0xe, 0xf5, 0x3, 0x9, 0xffffbff8, 0x3}, {0x0, 0x7, 0xfff, 0x2, 0x9163ef6c, 0x40080003}, {0x3, 0x3, 0x80, 0x0, 0xacc8, 0x2}, {0x8001, 0xffb, 0x9, 0xffff, 0xfffffffe, 0x81}, {0x8, 0xfff, 0x6, 0xeb84, 0x8, 0x30c4}, {0x7, 0x0, 0xfffffffc, 0x100, 0x4, 0x1000000}, {0x8004, 0x80000001, 0xfffffeff, 0xdf, 0x4, 0x5}, {0x0, 0x80000001, 0x9, 0x7, 0x1000, 0x7}, {0x5, 0x2, 0x8, 0x9, 0x474, 0x594}, {0x7fffffff, 0x1, 0x8, 0xfffffff9, 0x6, 0xffffffff}, {0x24, 0x5, 0xf, 0x2, 0x6, 0x8000003}, {0xbb, 0x5, 0x2, 0x310, 0xf}, {0x9b7d, 0x52fc, 0x6, 0x40000003, 0x48, 0x9}, {0xbd, 0x8, 0x10, 0xe4d, 0x7f, 0x3}, {0x8, 0x8, 0x9, 0x27, 0x2, 0x5}, {0x4, 0x1000, 0x5, 0x6, 0x93e, 0x6}, {0x1, 0x7, 0x0, 0x1, 0xff, 0x3}, {0xb, 0x7f, 0xfffff417, 0x1, 0x3ff, 0x9}, {0x4, 0x8, 0x7, 0xb, 0x8, 0x80004d}, {0x34db, 0x3, 0x3, 0x3ff, 0x1, 0x400}, {0x1, 0xcb1d, 0x8, 0x1, 0x0, 0x4}, {0x5, 0x3, 0x7, 0x8, 0x3, 0x984}, {0x2, 0xffffffff, 0x3, 0x2, 0x9, 0x40}, {0x7, 0x281, 0x7fffffff, 0x381, 0x3, 0x8}, {0x5, 0x4, 0x1, 0x8, 0x4, 0x2f}, {0x6, 0x3, 0x4, 0xd1a1, 0x9, 0x7}, {0x5, 0x3, 0x8, 0x4, 0x16, 0x2}, {0x8001, 0x87, 0x6, 0x1, 0x3, 0x4}, {0x6, 0x9e4, 0x8b7f, 0x11, 0x3, 0x7}, {0x7, 0x1, 0x800, 0x70f, 0x8001, 0x3}, {0x4, 0x10, 0x6, 0x1, 0x4, 0x22ff}, {0x5, 0x10001, 0x9, 0x0, 0x10001, 0x7}, {0xf85, 0x2e, 0x100, 0x3, 0x100, 0xe60c}, {0x2, 0x5, 0x1, 0xe000000, 0xcb06}, {0x4e2, 0x6ae, 0x2, 0x100, 0x5, 0xd}, {0x1, 0xcad, 0xa5, 0x2, 0x4d800, 0x6}, {0x20, 0x7f, 0x33, 0x2, 0x400, 0x4}, {0x4, 0x62e, 0xb, 0x219c, 0x0, 0x5}, {0x0, 0x4, 0x0, 0x1, 0x1, 0x1}, {0x7f, 0x945b, 0x0, 0x0, 0x8, 0x3}, {0xda1, 0x893, 0x2, 0x9, 0xfffffa2e, 0x6}, {0x1, 0xfffffff3, 0x7fffffff, 0x2, 0x0, 0x1}, {0x2, 0x8, 0x10000002, 0xe, 0x2, 0x2}, {0x6, 0x100, 0xe, 0x10000, 0x5, 0x7}, {0x0, 0x6, 0x7, 0x4, 0xc, 0x800}, {0x8, 0x10000, 0x1, 0x1, 0x7}, {0x7d5, 0x2, 0x4, 0x800, 0x1}, {0x1, 0x5, 0x6, 0x2, 0x8, 0xc}, {0x2, 0x1, 0x3, 0xc, 0x1, 0x2c3}, {0x1000, 0x3, 0xbc, 0x8001, 0xfa, 0x8}, {0x2, 0x3, 0x9, 0x50e, 0x55ac, 0xa5e2}, {0x0, 0x196680, 0xffffff91, 0x100, 0x3, 0x7}, {0x4, 0x4, 0x2, 0x1, 0x0, 0xe}, {0xfffffff5, 0x8, 0x7023, 0x8, 0x5, 0x851}, {0x3, 0x78, 0x7, 0xa, 0x5dec4cac, 0x6}, {0x4, 0x9, 0x3a, 0x2, 0x8, 0x602}, {0x4, 0x7fffffff, 0x8, 0x8, 0x8, 0xff}, {0x7, 0xfffffff1, 0x2f2c, 0x400, 0x6, 0x6}, {0x10001, 0x81, 0x40, 0x2, 0x89, 0x2}, {0x2, 0x8550, 0x4c, 0x800003, 0xfffffffa, 0x736d}, {0x7f, 0x199, 0x5, 0x9, 0x7, 0x2}, {0x7, 0x1, 0x8, 0x7, 0x2, 0x7}, {0x9, 0x3f1, 0x4, 0x5, 0x5, 0x8}, {0x100, 0x3ff, 0x0, 0x7f53, 0x7, 0x1}, {0x3ff, 0xc, 0x6, 0x1, 0x4, 0x4}, {0x9, 0x381, 0xfff, 0x5d7c, 0x0, 0x8001}, {0x8, 0x0, 0x7, 0xfffffffb, 0x3ee, 0x4}, {0xbfffffe, 0x6, 0x101, 0x5, 0x400, 0x8000400}, {0x7fff, 0xb3, 0x2, 0x10000, 0x6, 0x14}, {0x0, 0x1, 0x4c90, 0x4, 0x2000007f, 0x8}, {0x5, 0x25b, 0x0, 0x3, 0x2, 0x2}, {0x29dbdf0, 0xd, 0xfffffffd, 0x7, 0x6, 0x3}, {0x7, 0x1, 0xa, 0x8, 0x5, 0x5}, {0x473, 0x8, 0x2, 0x400, 0x4000000, 0x69b3d6e6}, {0x1, 0xb7bb, 0x22800000, 0x3, 0x10, 0x5}, {0x7f, 0x9, 0x6, 0xffffffff, 0x3, 0x8}, {0xfffffff7, 0x5, 0xa, 0x40, 0x863, 0x2}, {0xb, 0x9, 0xc, 0x3c1, 0x6e, 0x40}, {0x6, 0xd, 0x6, 0xfb0000, 0x1, 0x7}, {0xe0, 0x100, 0x1, 0xb, 0x8, 0x7}, {0xfff, 0x21, 0x0, 0x38, 0x0, 0x9}, {0x82, 0x10, 0x401, 0x0, 0x4, 0xef}, {0x7, 0x2, 0x200, 0x8, 0x9, 0x2}, {0x9, 0x5, 0xa33f, 0x101, 0x2, 0x10001}, {0x1, 0x4, 0x800004, 0x10001, 0x2, 0xce}, {0x4, 0x8, 0x8, 0x3, 0xf, 0x9}, {0x8000006, 0x5, 0x8, 0xffffffff, 0x405b9, 0x6}, {0x9, 0x0, 0x9, 0x2, 0x9}, {0x0, 0x2, 0xb, 0x7fffffff, 0xfc0, 0x7f1b4893}, {0x4, 0xd, 0x3, 0x4, 0x7, 0x7}, {0x4, 0x61c5, 0xe, 0x3, 0x3dcb, 0x9}, {0x200, 0x0, 0xe8, 0x1, 0x800000d4, 0x1}, {0xc651, 0x5f83, 0x2, 0x1, 0xd, 0x8}, {0xfff, 0x5, 0x1, 0x0, 0x49, 0x5}, {0x5, 0x3, 0x7, 0x97fd, 0xef, 0x202}, {0x2, 0xa, 0x1000, 0xfffffffe, 0x6, 0xe0}, {0x800, 0x4c, 0x7, 0x0, 0xfffffff7, 0x9}, {0x6, 0xffff, 0xffff8001, 0xa, 0xae36, 0x36b6800}, {0xcfb7, 0x0, 0x101, 0x2, 0x1, 0xae82}, {0x6, 0x800, 0xec3d, 0xffffffff, 0xea5, 0x3}, {0x9, 0x5, 0x2, 0x0, 0x0, 0xdc}, {0x6, 0x6, 0x29b3, 0x1e9, 0x6, 0x1}, {0x3, 0x7, 0x7, 0x3, 0x400, 0x81}, {0x970, 0x100, 0xb2eb, 0x2, 0x3, 0x9}, {0x3, 0x6, 0x8, 0x7, 0xd, 0x474c}, {0xf, 0x101, 0x9a, 0x1000, 0x2, 0xfffffffc}, {0x3, 0x98e, 0x1a5e666b, 0x10, 0x7, 0x9}, {0xfffffffb, 0x3, 0x3, 0x2ee8000, 0x8}, {0x3, 0x2, 0x2, 0x3, 0x3, 0x2}, {0x7, 0x4, 0x1, 0x7, 0x101, 0xef}, {0x70a0, 0x9, 0x425b597f, 0x1, 0x2, 0x7}, {0x6, 0xc000000, 0x402, 0x4, 0x8, 0x5}, {0x3, 0x9, 0x7, 0xfffffff9, 0x0, 0xffffffff}, {0x7, 0x9, 0x8, 0x0, 0x9, 0xd6}, {0x24, 0x10001, 0x6, 0x1, 0x39d6}, {0x401, 0x7d8, 0x9, 0x8000, 0xffff, 0x7}, {0x6, 0x92e4, 0x130, 0x0, 0x4, 0x9}, {0x0, 0x7fff, 0x7, 0x8001, 0x8, 0x5}, {0x7e, 0x800, 0xfffffff9, 0xa, 0x4b64, 0x80000001}, {0x2ad78a25, 0x202, 0x6, 0x6, 0x4, 0x8}, {0x2, 0x9, 0x0, 0x8a7, 0x129, 0xc}, {0x7, 0x2, 0x8, 0x3, 0xe01, 0xfffffff9}, {0x4a3, 0x0, 0x3, 0x514c, 0xf8a, 0x19}], [{0x1}, {0x4, 0x1}, {}, {0x1}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x4}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x3}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4}, {0x1}, {0x1, 0x1}, {0x4}, {0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x2, 0x1}, {0x5}, {0x3}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x5, 0x1}, {0x1}, {0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x1}, {0x1, 0x1}, {}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x4}, {0x3, 0x1}, {0x2}, {0x5}, {0x9, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x2}, {0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x2, 0x1}, {0x0, 0x1}, {0x4}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x4}, {0x5}, {0x3, 0x1}, {0x4}, {0x1}, {0x4}, {0x6, 0x1}, {0x5, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xeb0}}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) close_range(r3, r5, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x801, 0x0) write$rfkill(r7, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) sendmsg$NL80211_CMD_SET_CHANNEL(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x2c, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x29d}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3a}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40001}, 0x40000040) write$rfkill(r7, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_DELOBJ={0x1c, 0x14, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x0) 3.268305591s ago: executing program 2 (id=84): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"/631], 0x108}}, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r2, &(0x7f0000000100)="00112233445566778899", 0xa, 0x0, &(0x7f0000000080)={0x2, 0x1234, @loopback}, 0x10) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r3 = socket$inet6(0xa, 0x3, 0x3c) close(0x3) r4 = socket$inet_tcp(0x2, 0x1, 0x6) setsockopt$inet_tcp_buf(r4, 0x6, 0x1f, &(0x7f0000000400)='espintcp', 0x8) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000100)="88", 0xfdef}], 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/syz1\x00', 0x200002, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r7, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r8, 0xffffffffffffffff, 0x200000000000000) setsockopt$inet6_buf(r6, 0x29, 0x32, 0x0, 0x0) r9 = openat$cgroup_procs(r5, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r9, &(0x7f0000000040), 0x6) 3.224566786s ago: executing program 2 (id=85): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x14985, 0x3, 0x3}, 0x18, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket(0x1e, 0x1, 0x0) connect$tipc(r3, &(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x1, 0x1}}}, 0x10) r4 = socket(0x10, 0x80002, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000d8425bd7000fcdbff2500000000", @ANYRES32=0x0, @ANYBLOB="1062306a5b000000240012800b00010062726964676500001400028008000200060000000800030017"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYRESDEC, @ANYRES32=r2, @ANYBLOB="030000000002000028001280328c24e7fa71d87cee523d4bedacb4ae69ac66cf1ecd0daad4000000000000000000"], 0x50}}, 0x4008840) sendmmsg$alg(r4, &(0x7f00000000c0), 0x492492492492627, 0x0) write$binfmt_misc(r3, 0x0, 0x0) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x4ff9c, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000240)) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') openat2$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0/file0/../file0\x00', &(0x7f00000000c0)={0x2000, 0x20, 0x11}, 0x18) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f00000001c0)=0x1) ioctl$VIDIOC_S_FREQUENCY(0xffffffffffffffff, 0x402c5639, &(0x7f0000000080)={0x0, 0x1, 0x7}) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="3c01000010000100000000000000000000000000000000000000000000000000e000000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x13c}}, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000400)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000a80)="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", 0x1aa}, {&(0x7f0000001000)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e8c0795a70f158c443", 0x67}], 0x3, 0x0, 0x0, 0x20040890}], 0x1, 0x200000d0) syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x18, &(0x7f0000000000)={0xfffffffffffffa0c, 0xffffffffffffffff, 0x20, {0x900, 0x8}, 0x5}, 0x1) bind$unix(r2, &(0x7f0000003000)=@file={0x1, './file0\x00'}, 0x6e) landlock_restrict_self(r0, 0x1) connect$unix(r1, &(0x7f00000002c0)=@file={0x1, './file0\x00'}, 0x6e) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write$bt_hci(r6, &(0x7f0000000100)=ANY=[@ANYBLOB="4a00ffff11003ee0b4fdddd685986a49e00588f1ba6f"], 0x17) 2.938465631s ago: executing program 2 (id=86): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2781c2, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f00000001c0)=0x2) r1 = userfaultfd(0x80001) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') syz_clone3(&(0x7f00000023c0)={0x400000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0, 0x0, {r2}}, 0x58) syz_genetlink_get_family_id$gtp(&(0x7f0000002080), r2) read$FUSE(r2, &(0x7f0000000040)={0x2020}, 0x2020) r3 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x9) r4 = openat$autofs(0xffffff9c, &(0x7f0000000200), 0x604103, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000180)=0xc) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0x18, r3, {r5, 0xffffffffffffffff}}, './file0\x00'}) ioctl$SOUND_OLD_MIXER_INFO(r6, 0x80304d65, &(0x7f0000000080)) ioctl$TIOCGPTPEER(r0, 0x5441, 0xe633) 2.526511373s ago: executing program 1 (id=87): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x562, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc0f8565c, &(0x7f0000000000)={0x7b, 0xbd5, 0x1, {0x2, @pix_mp={0xe5, 0xd7a0, 0x32314247, 0x8, 0xa, [{0x2, 0x2}, {0x2, 0x6}, {0x1, 0x2}, {0x3, 0xa88}, {0xae, 0x1}, {0xe, 0x200}, {0x3ff, 0x5ecd}, {0x7fffffff, 0x6}], 0x4, 0x2a, 0x8}}, 0x400}) prctl$PR_SCHED_CORE(0x3e, 0x3ffff, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x6, 0x0, 0x80000000, 0x0, 0x0, 0x20000000000, 0xfffffffffffffffe, 0xfa11, 0xffffffff}, 0x0) set_mempolicy(0x3, &(0x7f00000000c0)=0x3, 0x5) socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x34, &(0x7f00000003c0), 0x4) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) syz_emit_ethernet(0x0, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r3, 0x0, 0x0, 0x40000c0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000300)={0x0, 0x5}, &(0x7f0000000340)=0x8) mlock(&(0x7f00002e9000/0x3000)=nil, 0x3000) r4 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r5 = openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) close(r5) execveat$binfmt(0xffffffffffffff9c, r4, 0x0, &(0x7f0000000140), 0x0) r6 = openat$binfmt(0xffffffffffffff9c, r4, 0x2, 0x0) write(r6, &(0x7f0000000180)="010101", 0x3) close(r6) execveat$binfmt(0xffffffffffffffff, r4, 0x0, &(0x7f0000000500)={[&(0x7f0000000200)='-%%\x00', &(0x7f00000002c0)='nilfs2\x00', &(0x7f0000000400)='\x00', &(0x7f0000000440)='/dev/video#\x00', &(0x7f0000000480)='\x00', &(0x7f00000004c0)='\x00']}, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) close(r7) fchmodat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x1ff) execveat$binfmt(r7, r4, &(0x7f0000000340), 0x0, 0x0) fsopen(&(0x7f0000000280)='nilfs2\x00', 0x0) 2.445331837s ago: executing program 0 (id=88): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000180), 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x1c, &(0x7f0000000b00)=ANY=[@ANYBLOB="58485dba85ad910742021610d1f26a5f6797b2e10b9e5df2e03644b90104bc843094ab29032ac148e57930c886a64e7bbb4c6000", @ANYBLOB="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"], 0x0, 0x8}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448d4, &(0x7f0000000040)={0x1, 0x3f, "f8ff00", 0xff, 0x3}) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, 0x0, &(0x7f0000000600)) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x380}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_OPER(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0108000300"/18, @ANYRES32=0x0, @ANYBLOB="0c0099000100000001000000"], 0x28}}, 0x0) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x3, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xe) r5 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) ioctl$PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xe4, 0x2, 0x0, 0x2}) getsockopt$inet6_tcp_int(r2, 0x6, 0x1e, &(0x7f00000001c0), &(0x7f00000003c0)=0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./myconfig\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./myconfig\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./myconfig/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000400)='./myconfig/usb_gadget/g1/functions/uac2.usb0/p_srate\x00', 0x1, 0x0) write(0xffffffffffffffff, &(0x7f0000000440)='44100,48000,88200,96000,176400,192000,352', 0x29) symlinkat(&(0x7f0000000580)='./myconfig/usb_gadget/g1/functions/uac2.usb0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./myconfig/usb_gadget/g1/configs/c.1/uac2.usb0\x00') write(0xffffffffffffffff, &(0x7f0000000640)='usbip-vudc.0', 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) 2.283227735s ago: executing program 3 (id=89): syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet_mptcp(0x2, 0x1, 0x106) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') setns(r1, 0x2000000) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(0xffffffffffffffff, 0x3b87, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0xb6, @ipv4={'\x00', '\xff\xff', @local}, 0xc4ca}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x3) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "25fd25990fe381b9", "f511161d94f179ecf85eb61b6a4762eb", "1e59ddbe", "06ed010001809f9b"}, 0x28) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000000c0)=0x2, 0x4) sendto$inet6(r0, &(0x7f0000000300)='S', 0xfffffffffffffe94, 0xc000, 0x0, 0xf0ff) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x2100e6d4, 0x4) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000340)={{0x1, 0x1, 0x18, r2, {0xfffff5d4}}, './file0\x00'}) ioctl$TIOCSTI(r4, 0x5412, 0x0) writev(r3, &(0x7f0000000840)=[{0x0}], 0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) socket$unix(0x1, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x50) 2.22457529s ago: executing program 0 (id=90): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) r0 = epoll_create1(0x0) socket$alg(0x26, 0x5, 0x0) pselect6(0x8, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000240)={0x1, 0x0, 0xffffffffffffffff}, 0x0, 0x0) r1 = syz_ublk_setup_io_uring(0x7056, &(0x7f0000000500)={0x0, 0x30b5, 0x0, 0x1, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f00000002c0)={0x0, 0x3c8c, 0x800, 0x3, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x4, 0x6, 0x15e, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x8, 0x10080700, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x1, 0x3, 0x125, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x82, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x8, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0xd3, 0x0, 0x0}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x2, 0x3, 0xf3b, 0x2, 0x13fffffc}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r8, &(0x7f0000000100)={0x8}) shutdown(r8, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) r9 = socket$kcm(0x23, 0x2, 0x0) recvmsg(r9, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x2) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x24, 0x2c, 0x2, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0x0, 0x9}, {0xfffe, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x804009d) r10 = syz_open_dev$radio(0x0, 0x1, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000040)=ANY=[@ANYRES32=r10], &(0x7f0000000300)='GPL\x00', 0x2, 0xb3, &(0x7f0000000140)=""/179, 0x41100, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x44004080}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) 1.99832155s ago: executing program 2 (id=91): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[], 0x48) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e045f2d20"], 0x7) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='\x00', @ANYRES16, @ANYBLOB="040026bd7000fcdbdf250f000000080031000200000008003400000000"], 0x2c}, 0x1, 0x0, 0x0, 0x8841}, 0x4008041) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = dup(0xffffffffffffffff) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_user_confirm_req={{0x33, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}}}, 0xd) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000080)={{0xa, 0x4e22, 0xffff26c0, @loopback, 0x28}, {0xa, 0x4e22, 0x5, @mcast1}, 0x0, {[0x8, 0x8, 0x101, 0x8, 0x1, 0x200, 0x8, 0x6]}}, 0x5c) r2 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r2, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r2, 0xda90) accept4(r2, 0x0, 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000000)=@req3={0x1, 0x8, 0x7, 0x4, 0xf8b, 0x1, 0x80}, 0x1c) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$sock_buf(r4, 0x1, 0x1c, 0x0, &(0x7f0000001600)) setns(0xc9, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x14, 0x30, 0xffff}, 0x14}}, 0x80c0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) 1.209390766s ago: executing program 1 (id=92): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[], 0x48) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e045f2d20"], 0x7) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='\x00', @ANYRES16=r0, @ANYBLOB="040026bd7000fcdbdf250f000000080031000200000008003400000000"], 0x2c}, 0x1, 0x0, 0x0, 0x8841}, 0x4008041) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_user_confirm_req={{0x33, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}}}, 0xd) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000080)={{0xa, 0x4e22, 0xffff26c0, @loopback, 0x28}, {0xa, 0x4e22, 0x5, @mcast1}, 0x0, {[0x8, 0x8, 0x101, 0x8, 0x1, 0x200, 0x8, 0x6]}}, 0x5c) r2 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r2, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r2, 0xda90) accept4(r2, 0x0, 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000000)=@req3={0x1, 0x8, 0x7, 0x4, 0xf8b, 0x1, 0x80}, 0x1c) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$sock_buf(r4, 0x1, 0x1c, 0x0, &(0x7f0000001600)) setns(0xc9, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x14, 0x30, 0xffff}, 0x14}}, 0x80c0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) 1.021949973s ago: executing program 0 (id=93): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x10, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18fffff0000000000000000009000000611700000000000095"], &(0x7f0000001340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1002}, 0x94) 970.904475ms ago: executing program 3 (id=94): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8080, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) socket(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) mlock(&(0x7f0000400000/0xc00000)=nil, 0xc00000) mremap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x400000, 0x7, &(0x7f0000000000/0x400000)=nil) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) r1 = userfaultfd(0x801) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) mremap(&(0x7f0000a94000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000259000/0x4000)=nil) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b80)=ANY=[@ANYBLOB="18030000210000022cbd7000fddbdf25ac141433000000000000000000000000fe8800000000000000000000000000014e2303ff4e210008020080a000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESHEX=r0], 0x318}, 0x1, 0x0, 0x0, 0x84}, 0x4c010) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="1800120076000d0b"], 0x18}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0xffffffff, 0x0, {0x0, 0x0, 0x0, r6, {0xffff, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0xffffffff, 0x6361, 0x7, 0xfffffffd, 0x40000004}}}}]}, 0x4c}}, 0x20000804) close(r3) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r7) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYRESDEC=r8, @ANYRES32=r0, @ANYBLOB="010000000d0000000000010a0000000017000000000000000065743f732239008000006c657230"], 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x8041) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) 918.53342ms ago: executing program 0 (id=95): r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000200), 0xc000, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x1e, 0x4000) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) (async) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) setsockopt$sock_attach_bpf(r4, 0x1, 0x24, &(0x7f0000000000), 0x4) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/tcp\x00') preadv(r5, &(0x7f0000000000)=[{&(0x7f0000000100)=""/191, 0xbf}], 0x19, 0x25, 0x0) (async) preadv(r5, &(0x7f0000000000)=[{&(0x7f0000000100)=""/191, 0xbf}], 0x19, 0x25, 0x0) syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) io_submit(0x0, 0x0, 0x0) (async) io_submit(0x0, 0x0, 0x0) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x124411, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) r8 = creat(&(0x7f0000000080)='./file0\x00', 0x6a) close(r8) (async) close(r8) r9 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r9, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) r10 = socket(0x1e, 0x4, 0x0) recvmsg$unix(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x20) sendmmsg(r10, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendfile(r6, r10, &(0x7f0000000280)=0x1, 0xff) (async) sendfile(r6, r10, &(0x7f0000000280)=0x1, 0xff) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)) (async) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r12, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r11, 0x0}]) socket$tipc(0x1e, 0x5, 0x0) (async) r13 = socket$tipc(0x1e, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f00000002c0), 0x200480, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r13}}) getsockopt$inet6_udp_int(r7, 0x11, 0x66, 0x0, &(0x7f00000000c0)) (async) getsockopt$inet6_udp_int(r7, 0x11, 0x66, 0x0, &(0x7f00000000c0)) write$binfmt_aout(r3, &(0x7f00000010c0)=ANY=[], 0x1a3) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6b2b4e00d9683dda1af1ea88bdfb7fb0a0100ffffffff000000000000000000000000000000000020001000", "2809e8d2e108598948224ad54afac11d875397bdb22d0000b440a1a93c5240f45f81ff010000000000000000000000000000000000000008ddffffffffffffff", "90be8b1c551265406c7f306003d8a0f4bd00", [0xfffffffffffffffc]}}) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) (async) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) 427.080841ms ago: executing program 2 (id=96): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) accept4(r1, 0x0, 0x0, 0x80000) writev(r1, &(0x7f0000000200)=[{&(0x7f00000003c0)='n', 0xfdef}], 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(r2, 0x4068aea3, &(0x7f0000000000)={0x74, 0x0, 0x6087639c4883a999}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r5, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646, 0x10c04}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8, 0x9, 0x3}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40e95}, 0x20048040) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r8, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB="48050000003f000008000a00", @ANYRES32=r9, @ANYBLOB="140012800b000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x20004081}, 0x40000) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) fsopen(&(0x7f0000000000)='ceph\x00', 0x0) r10 = fspick(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x9) fsconfig$FSCONFIG_SET_STRING(r10, 0x1, &(0x7f0000000240)='key\x00\fL\xa7\xf3\x19\x85\x17\xdcv\xc5K\x1bp\x90[d\xbb\xc3CqGw\x1b+\xda0x0, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000080)={0xc, {"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", 0x1000}}, 0x1006) ioctl$KVM_GET_XCRS(0xffffffffffffffff, 0x8188aea6, &(0x7f00000010c0)) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) r8 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000100)={@loopback, 0x0, 0x2, 0x3, 0x9, 0x0, 0xc96e}, 0x20) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4400ae8f, &(0x7f00000000c0)=@x86={0x60, 0x4, 0x9, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x7f, 0x9, 0x1, 0x0, 0x0, 0x8, 0x4, 0xff, 0xff, 0x0, '\x00', 0xfd, 0x1}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@updpolicy={0xb4, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x41}, @in6=@local, 0x0, 0x0, 0x0, 0xc9c, 0xa, 0x10, 0x30, 0x0, 0x0, 0xee01}, {0x0, 0x7f, 0x7, 0x4000003, 0x0, 0xfffffffffffffffd, 0x5, 0xffffffffffffffff}, {0xffffffff, 0x0, 0x0, 0x5}, 0x0, 0x0, 0x1, 0x1, 0x2}}, 0xb4}, 0x1, 0x0, 0x0, 0x84811}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./bus\x00', 0xe8) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='.\x00', 0x0, 0x100e002, 0x0) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000140)={0x60, 0x3, &(0x7f0000001000/0x3000)=nil, &(0x7f0000f5a000/0x2000)=nil, 0x2, 0x0, 0x0, 0xdff, 0x3e, 0x0, 0x2, 0x54}) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000040)='./file0\x00'}, 0x14) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000140)=@IORING_OP_FIXED_FD_INSTALL={0x36, 0x43, 0x0, r9, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r10}}) io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) r11 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ppoll(&(0x7f0000000080)=[{r11, 0x42c0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r0, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000000)="b9ff03030018698cb89e40f086dd6058650e00002f00630677", 0x0, 0xfa, 0x2000000, 0x3f, 0xc0, &(0x7f0000000440), &(0x7f0000000080), 0x4}, 0x50) 1.380349ms ago: executing program 1 (id=101): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000540)={0x28, r1, 0x101, 0x0, 0x0, {0x4, 0x0, 0xf000}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}]}, 0x28}}, 0x0) 0s ago: executing program 1 (id=102): mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x11e) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/module/msr/parameters/allow_writes\x00', 0x2, 0x0) write(r2, &(0x7f0000000340)='on\x00', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/cpu/0/msr\x00', 0x2, 0x0) pwrite64(r3, &(0x7f0000000200), 0x0, 0x1a0) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/cpu/1/msr\x00', 0x2, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x0) write(r5, &(0x7f0000000180)='0', 0x1) pwrite64(0xffffffffffffffff, &(0x7f0000000400)="00004b75043df1ef2fec59a4268eff01d0f9483b156603000000000000f6ae50a95a9329e7504d70c08576f927000099c94ec489ce09f91fd600000000", 0x3d, 0x1a0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @broadcast}]}, &(0x7f0000000100)=0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0x7, 0x23}, 0x90) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYRESOCT, @ANYBLOB="6832b0a54757e6a8f87ab08f3544ff4409ba8b8c5bea4ed8f6afed864b660a867f0174361c4d669cded30fc8fb4911c334e54bd1ed4404d67c3a149469f9898ad98fe0f23ded5682ea5dbcad1608761adf526973443a1431d0ae88416a399775209098f36987adb637f716d941f552bc34989d2ebb051bb675081461da052ffc3fd33fd9a73246069c88e3a79425375158496a2a60bd7a0868969afc2e8c64771225a300"/178, @ANYRESDEC, @ANYRESHEX=r1], 0x30}}, 0x0) r6 = socket$kcm(0x2, 0x3, 0x2) syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x5e5e, 0xc00, 0x1, 0x11}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)) close(r6) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:10626' (ED25519) to the list of known hosts. [ 40.839148][ T5669] cgroup: Unknown subsys name 'net' [ 41.039838][ T5669] cgroup: Unknown subsys name 'cpuset' [ 41.043646][ T5669] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 42.009775][ T5669] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 46.371060][ T5092] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 46.396041][ T5742] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 46.402626][ T5742] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 46.408345][ T5742] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 46.411362][ T5742] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 46.413434][ T5746] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 46.414458][ T5742] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 46.415338][ T5748] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 46.415788][ T5744] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 46.417499][ T5748] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 46.418622][ T5744] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 46.419190][ T5744] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 46.420165][ T5742] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 46.420886][ T5746] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 46.422249][ T5746] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 46.423242][ T5741] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 46.426714][ T5744] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 46.435135][ T5748] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 46.438149][ T5744] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 46.440363][ T5748] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 47.031156][ T5743] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.034623][ T5743] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.037534][ T5743] bridge_slave_0: entered allmulticast mode [ 47.040706][ T5743] bridge_slave_0: entered promiscuous mode [ 47.069539][ T5743] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.071861][ T5743] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.074192][ T5743] bridge_slave_1: entered allmulticast mode [ 47.077141][ T5743] bridge_slave_1: entered promiscuous mode [ 47.087394][ T5733] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.090133][ T5733] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.092447][ T5733] bridge_slave_0: entered allmulticast mode [ 47.095113][ T5733] bridge_slave_0: entered promiscuous mode [ 47.136605][ T5733] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.140042][ T5733] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.143179][ T5733] bridge_slave_1: entered allmulticast mode [ 47.147336][ T5733] bridge_slave_1: entered promiscuous mode [ 47.170862][ T5743] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.180605][ T5738] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.183448][ T5738] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.186072][ T5738] bridge_slave_0: entered allmulticast mode [ 47.192680][ T5738] bridge_slave_0: entered promiscuous mode [ 47.243854][ T5743] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.263371][ T5738] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.266707][ T5738] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.270179][ T5738] bridge_slave_1: entered allmulticast mode [ 47.274227][ T5738] bridge_slave_1: entered promiscuous mode [ 47.282046][ T5733] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.319270][ T5733] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.336735][ T5743] team0: Port device team_slave_0 added [ 47.357743][ T5743] team0: Port device team_slave_1 added [ 47.373178][ T5738] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.379437][ T5733] team0: Port device team_slave_0 added [ 47.385197][ T5733] team0: Port device team_slave_1 added [ 47.411811][ T5738] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.443707][ T5743] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.446701][ T5743] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.456007][ T5743] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.461319][ T5743] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.463569][ T5743] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.471564][ T5743] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.488721][ T5733] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.490977][ T5733] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.498974][ T5733] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.502516][ T5737] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.505348][ T5737] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.507862][ T5737] bridge_slave_0: entered allmulticast mode [ 47.510794][ T5737] bridge_slave_0: entered promiscuous mode [ 47.514741][ T5737] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.517092][ T5737] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.519342][ T5737] bridge_slave_1: entered allmulticast mode [ 47.522873][ T5737] bridge_slave_1: entered promiscuous mode [ 47.540277][ T5738] team0: Port device team_slave_0 added [ 47.543543][ T5733] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.546518][ T5733] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.555672][ T5733] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.573113][ T5738] team0: Port device team_slave_1 added [ 47.582621][ T5737] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.613393][ T5737] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.632667][ T5738] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.634864][ T5738] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.643085][ T5738] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.661179][ T5743] hsr_slave_0: entered promiscuous mode [ 47.664238][ T5743] hsr_slave_1: entered promiscuous mode [ 47.679601][ T5733] hsr_slave_0: entered promiscuous mode [ 47.682463][ T5733] hsr_slave_1: entered promiscuous mode [ 47.685807][ T5733] debugfs: 'hsr0' already exists in 'hsr' [ 47.688038][ T5733] Cannot create hsr debugfs directory [ 47.690177][ T5738] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.692234][ T5738] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.701725][ T5738] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.718127][ T5737] team0: Port device team_slave_0 added [ 47.746410][ T5737] team0: Port device team_slave_1 added [ 47.800722][ T5737] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.803434][ T5737] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.814039][ T5737] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.822674][ T5737] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.825194][ T5737] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.834402][ T5737] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.887625][ T5738] hsr_slave_0: entered promiscuous mode [ 47.890823][ T5738] hsr_slave_1: entered promiscuous mode [ 47.893822][ T5738] debugfs: 'hsr0' already exists in 'hsr' [ 47.896258][ T5738] Cannot create hsr debugfs directory [ 47.992596][ T5737] hsr_slave_0: entered promiscuous mode [ 47.994970][ T5737] hsr_slave_1: entered promiscuous mode [ 47.997207][ T5737] debugfs: 'hsr0' already exists in 'hsr' [ 47.998997][ T5737] Cannot create hsr debugfs directory [ 48.138084][ T5743] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 48.147820][ T5743] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.157787][ T5743] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 48.163909][ T5743] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.170259][ T5743] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 48.174381][ T5743] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.177333][ T5743] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 48.183405][ T5743] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.246204][ T5733] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 48.250878][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.253947][ T5733] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 48.258046][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.261128][ T5733] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 48.265735][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.269515][ T5733] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 48.273420][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.329921][ T5738] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 48.335394][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.341532][ T5738] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 48.345897][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.349048][ T5738] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 48.353254][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.356251][ T5738] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 48.360803][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.419690][ T5743] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.423766][ T5737] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 48.432169][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.442453][ T5737] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 48.448824][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.451706][ T5737] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 48.455832][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.457791][ T5735] Bluetooth: hci2: command tx timeout [ 48.457794][ T5748] Bluetooth: hci0: command tx timeout [ 48.458039][ T5748] Bluetooth: hci3: command tx timeout [ 48.460505][ T5737] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 48.469953][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.506575][ T5743] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.527233][ T5735] Bluetooth: hci1: command tx timeout [ 48.533974][ T162] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.536557][ T162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.547300][ T162] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.549651][ T162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.563017][ T5733] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.595626][ T5733] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.616635][ T162] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.619530][ T162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.639461][ T162] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.641845][ T162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.657258][ T5738] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.680762][ T5737] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.692814][ T5738] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.705780][ T1160] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.708202][ T1160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.725766][ T1160] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.728201][ T1160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.734889][ T5737] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.750243][ T1160] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.752591][ T1160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.775001][ T1160] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.777335][ T1160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.967296][ T5743] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.992174][ T5733] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.023232][ T5743] veth0_vlan: entered promiscuous mode [ 49.036537][ T5743] veth1_vlan: entered promiscuous mode [ 49.060225][ T5733] veth0_vlan: entered promiscuous mode [ 49.075907][ T5743] veth0_macvtap: entered promiscuous mode [ 49.082974][ T5733] veth1_vlan: entered promiscuous mode [ 49.088927][ T5743] veth1_macvtap: entered promiscuous mode [ 49.099723][ T5738] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.114421][ T5737] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.126550][ T5743] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.140803][ T5743] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.169089][ T5733] veth0_macvtap: entered promiscuous mode [ 49.192220][ T5733] veth1_macvtap: entered promiscuous mode [ 49.218013][ T5738] veth0_vlan: entered promiscuous mode [ 49.226590][ T5733] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.258021][ T5733] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.262532][ T5738] veth1_vlan: entered promiscuous mode [ 49.287254][ T1155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.292365][ T1155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.299072][ T5737] veth0_vlan: entered promiscuous mode [ 49.321550][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.325378][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.357446][ T5737] veth1_vlan: entered promiscuous mode [ 49.374553][ T5738] veth0_macvtap: entered promiscuous mode [ 49.380860][ T1155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.383979][ T1155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.393720][ T5738] veth1_macvtap: entered promiscuous mode [ 49.394840][ T5743] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 49.418885][ T5743] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 49.426544][ T1160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.426821][ T5743] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 49.432118][ T1160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.436753][ T5738] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.438329][ T5743] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 49.442634][ T5583] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.443022][ T5583] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.458654][ T5737] veth0_macvtap: entered promiscuous mode [ 49.461592][ T5743] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 49.463276][ T5737] veth1_macvtap: entered promiscuous mode [ 49.477106][ T5738] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.514587][ T5737] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.548407][ T5737] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.607227][ T5583] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.618393][ T5815] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.626258][ T1155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.629706][ T1155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.655660][ T1155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.728215][ T1155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.780227][ T1155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.782922][ T1155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.803736][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.811730][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.838800][ T5583] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.868647][ T5815] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.871610][ T5815] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.887967][ T5815] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.893038][ T5815] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.895856][ T5815] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.927366][ T5583] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.930198][ T5583] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.932952][ T5583] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.935669][ T5583] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.938574][ T5583] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.941355][ T5583] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.528332][ T5735] Bluetooth: hci3: command tx timeout [ 50.537307][ T5748] Bluetooth: hci0: command tx timeout [ 50.539396][ T5735] Bluetooth: hci2: command tx timeout [ 50.607924][ T5748] Bluetooth: hci1: command tx timeout [ 51.899666][ T1357] cfg80211: failed to load regulatory.db [ 51.946264][ T5886] Set syz1 is full, maxelem 65536 reached [ 52.607991][ T5092] Bluetooth: hci0: command tx timeout [ 52.610514][ T5748] Bluetooth: hci2: command tx timeout [ 53.340092][ T5934] netlink: 'syz.3.13': attribute type 4 has an invalid length. [ 53.387602][ T5934] netlink: 'syz.3.13': attribute type 4 has an invalid length. [ 53.806957][ T5748] Bluetooth: hci3: command tx timeout [ 54.049201][ T5748] Bluetooth: hci1: command tx timeout [ 54.104776][ T5951] IPVS: sync thread started: state = MASTER, mcast_ifn = vcan0, syncid = 0, id = 0 [ 54.113887][ T5950] lo: entered allmulticast mode [ 54.126060][ T5950] netlink: 'syz.2.16': attribute type 1 has an invalid length. [ 54.169946][ T5950] team0: Port device geneve2 added [ 54.235802][ T5950] netdevsim netdevsim2: Direct firmware load for failed with error -2 [ 54.242031][ T5950] netdevsim netdevsim2: Falling back to sysfs fallback for: [ 54.349753][ T5962] ======================================================= [ 54.349753][ T5962] WARNING: The mand mount option has been deprecated and [ 54.349753][ T5962] and is ignored by this kernel. Remove the mand [ 54.349753][ T5962] option from the mount to silence this warning. [ 54.349753][ T5962] ======================================================= [ 54.376454][ T5962] 9pnet_fd: p9_fd_create_unix (5962): problem connecting socket: ./file0: -111 [ 54.706538][ T5969] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(12) [ 54.708738][ T5969] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 54.721115][ T5969] vhci_hcd vhci_hcd.0: Device attached [ 54.751231][ T5969] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 54.898202][ T5949] lo: left allmulticast mode [ 55.017611][ T887] usb 38-1: SetAddress Request (2) to port 0 [ 55.019713][ T887] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd [ 55.024569][ T42] audit: type=1804 audit(1786235491.419:2): pid=5988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.23" name="bus" dev="ramfs" ino=9044 res=1 errno=0 [ 55.037027][ T42] audit: type=1804 audit(1786235491.419:3): pid=5988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.23" name="bus" dev="ramfs" ino=9044 res=1 errno=0 [ 55.039116][ T5982] vhci_hcd: connection closed [ 55.050505][ T5583] vhci_hcd vhci_hcd.0: stop threads [ 55.057481][ T5583] vhci_hcd vhci_hcd.0: release socket [ 55.065139][ T5583] vhci_hcd vhci_hcd.0: disconnect device [ 56.125615][ T5999] syz_tun: entered allmulticast mode [ 56.136138][ T5998] syz_tun: left allmulticast mode [ 56.343693][ T6015] jffs2: notice: (6015) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 56.973543][ T6044] syz.2.35 uses obsolete (PF_INET,SOCK_PACKET) [ 57.276494][ T6046] syzkaller0: entered promiscuous mode [ 57.279251][ T6046] syzkaller0: entered allmulticast mode [ 57.504393][ T6054] oom_control is deprecated and will be removed. Please report your usecase to linux-mm-@kvack.org if you depend on this functionality. [ 57.515496][ T6058] jffs2: notice: (6058) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 57.629847][ T6054] socket: no more sockets [ 57.644176][ T6065] 9p: Bad value for 'rfdno' [ 58.441926][ T6085] netlink: 16 bytes leftover after parsing attributes in process `syz.0.47'. [ 59.619310][ T6107] 9p: Bad value for 'rfdno' [ 59.868724][ T6110] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 60.137199][ T887] usb 38-1: device descriptor read/8, error -110 [ 60.198100][ T6112] netlink: 32 bytes leftover after parsing attributes in process `syz.1.56'. [ 60.528210][ T887] usb usb38-port1: attempt power cycle [ 60.644380][ T6125] netlink: 4 bytes leftover after parsing attributes in process `syz.0.62'. [ 61.107519][ T887] usb usb38-port1: unable to enumerate USB device [ 61.468496][ T6156] ALSA: seq fatal error: cannot create timer (-19) [ 61.473834][ T42] audit: type=1326 audit(1786235497.869:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6158 comm="syz.2.72" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x7ffc0000 [ 61.483460][ T6154] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 61.485564][ T6154] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 61.486584][ T42] audit: type=1326 audit(1786235497.879:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6158 comm="syz.2.72" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x7ffc0000 [ 61.492788][ T6154] vhci_hcd vhci_hcd.0: Device attached [ 61.502850][ T42] audit: type=1326 audit(1786235497.899:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6158 comm="syz.2.72" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x7ffc0000 [ 61.514596][ T42] audit: type=1326 audit(1786235497.899:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6158 comm="syz.2.72" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x7ffc0000 [ 61.554022][ T42] audit: type=1326 audit(1786235497.949:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6158 comm="syz.2.72" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x7ffc0000 [ 61.561835][ T42] audit: type=1326 audit(1786235497.949:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6158 comm="syz.2.72" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf705efec code=0x7ffc0000 [ 61.561860][ T42] audit: type=1326 audit(1786235497.949:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6158 comm="syz.2.72" exe="/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf705efec code=0x7ffc0000 [ 61.561881][ T42] audit: type=1326 audit(1786235497.949:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6158 comm="syz.2.72" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x7ffc0000 [ 61.561902][ T42] audit: type=1326 audit(1786235497.949:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6158 comm="syz.2.72" exe="/syz-executor" sig=0 arch=40000003 syscall=125 compat=1 ip=0xf705efec code=0x7ffc0000 [ 61.561923][ T42] audit: type=1326 audit(1786235497.949:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6158 comm="syz.2.72" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705efec code=0x7ffc0000 [ 61.666645][ T6160] vhci_hcd: connection closed [ 61.674028][ T5583] vhci_hcd vhci_hcd.0: stop threads [ 61.674055][ T5583] vhci_hcd vhci_hcd.0: release socket [ 61.674621][ T5583] vhci_hcd vhci_hcd.0: disconnect device [ 61.730976][ T6165] capability: warning: `syz.3.71' uses deprecated v2 capabilities in a way that may be insecure [ 61.788434][ T850] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 61.996016][ T850] usb 5-1: Dual-Role OTG device on HNP port [ 62.003510][ T850] usb 5-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.02 [ 62.007381][ T850] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.053695][ T850] gspca_main: spca501-2.14.0 probing 0000:0000 [ 62.075839][ T850] gspca_spca501: reg write: error -32 [ 62.081602][ T850] spca501 5-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 62.086220][ T850] spca501 5-1:1.0: probe with driver spca501 failed with error -22 [ 62.095769][ T850] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 62.096056][ T6170] netlink: 12 bytes leftover after parsing attributes in process `syz.1.75'. [ 62.438798][ T6175] process 'syz.0.76' launched '/dev/fd/4' with NULL argv: empty string added [ 63.272867][ T6195] netlink: 56 bytes leftover after parsing attributes in process `syz.2.84'. [ 63.456891][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 63.471506][ T6204] netlink: 4 bytes leftover after parsing attributes in process `syz.2.85'. [ 63.561724][ T6200] Zero length message leads to an empty skb [ 66.040714][ T6268] syzkaller0: entered promiscuous mode [ 66.042731][ T6268] syzkaller0: entered allmulticast mode [ 66.182350][ T6279] netlink: 'syz.2.96': attribute type 1 has an invalid length. [ 66.222070][ T6279] netlink: 4 bytes leftover after parsing attributes in process `syz.2.96'. [ 66.228881][ T6279] bridge1: entered promiscuous mode [ 66.243040][ T6279] bond1: (slave bridge1): making interface the new active one [ 66.258738][ T6279] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 66.341365][ T6287] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2761322500 (353449280000 ns) > initial count (313845741312 ns). Using initial count to start timer. [ 66.592442][ T5840] [ 66.593519][ T5840] ============================================ [ 66.596070][ T5840] WARNING: possible recursive locking detected [ 66.598642][ T5840] syzkaller #0 Tainted: G L [ 66.601257][ T5840] -------------------------------------------- [ 66.603795][ T5840] kworker/2:5/5840 is trying to acquire lock: [ 66.606339][ T5840] ffff888046e4b128 (&grp->list_lock){.+.+}-{3:3}, at: snd_seq_deliver_event+0x230/0x860 [ 66.610333][ T5840] [ 66.610333][ T5840] but task is already holding lock: [ 66.613415][ T5840] ffff88806d741128 (&grp->list_lock){.+.+}-{3:3}, at: snd_seq_deliver_event+0x230/0x860 [ 66.617260][ T5840] [ 66.617260][ T5840] other info that might help us debug this: [ 66.620558][ T5840] Possible unsafe locking scenario: [ 66.620558][ T5840] [ 66.623600][ T5840] CPU0 [ 66.625010][ T5840] ---- [ 66.626411][ T5840] lock(&grp->list_lock); [ 66.628295][ T5840] lock(&grp->list_lock); [ 66.630190][ T5840] [ 66.630190][ T5840] *** DEADLOCK *** [ 66.630190][ T5840] [ 66.633548][ T5840] May be due to missing lock nesting notation [ 66.633548][ T5840] [ 66.636973][ T5840] 3 locks held by kworker/2:5/5840: [ 66.639163][ T5840] #0: ffff88801bcaa940 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 [ 66.643418][ T5840] #1: ffffc9000652fd08 ((work_completion)(&runtime->event_work)){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 [ 66.648138][ T5840] #2: ffff88806d741128 (&grp->list_lock){.+.+}-{3:3}, at: snd_seq_deliver_event+0x230/0x860 [ 66.652379][ T5840] [ 66.652379][ T5840] stack backtrace: [ 66.654826][ T5840] CPU: 2 UID: 0 PID: 5840 Comm: kworker/2:5 Tainted: G L syzkaller #0 PREEMPT(full) [ 66.654852][ T5840] Tainted: [L]=SOFTLOCKUP [ 66.654858][ T5840] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 66.654870][ T5840] Workqueue: events snd_rawmidi_input_event_work [ 66.654906][ T5840] Call Trace: [ 66.654922][ T5840] [ 66.654929][ T5840] dump_stack_lvl+0x100/0x190 [ 66.654951][ T5840] print_deadlock_bug.cold+0xbd/0xca [ 66.654977][ T5840] __lock_acquire+0x1256/0x1a40 [ 66.655008][ T5840] lock_acquire+0x1b9/0x370 [ 66.655023][ T5840] ? snd_seq_deliver_event+0x230/0x860 [ 66.655042][ T5840] ? do_raw_read_unlock+0x3f/0x70 [ 66.655062][ T5840] _raw_read_lock+0x5f/0x70 [ 66.655083][ T5840] ? snd_seq_deliver_event+0x230/0x860 [ 66.655100][ T5840] snd_seq_deliver_event+0x230/0x860 [ 66.655116][ T5840] ? do_raw_spin_lock+0x128/0x260 [ 66.655136][ T5840] ? __pfx_snd_seq_deliver_event+0x10/0x10 [ 66.655158][ T5840] ? mark_held_locks+0x40/0x70 [ 66.655183][ T5840] ? lockdep_hardirqs_on+0x78/0x100 [ 66.655207][ T5840] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 66.655227][ T5840] ? client_use_ptr+0x107/0x4b0 [ 66.655253][ T5840] snd_seq_kernel_client_dispatch+0x16f/0x1b0 [ 66.655272][ T5840] queue_broadcast_event.isra.0+0x143/0x1b0 [ 66.655293][ T5840] ? __pfx_queue_broadcast_event.isra.0+0x10/0x10 [ 66.655312][ T5840] ? mark_held_locks+0x40/0x70 [ 66.655361][ T5840] ? lockdep_hardirqs_on+0x78/0x100 [ 66.655384][ T5840] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 66.655405][ T5840] ? snd_seq_timer_start+0x1f0/0x2a0 [ 66.655430][ T5840] snd_seq_control_queue+0x709/0xb70 [ 66.655451][ T5840] ? __pfx_event_input_timer+0x10/0x10 [ 66.655475][ T5840] __snd_seq_deliver_single_event+0x127/0x1c0 [ 66.655494][ T5840] snd_seq_deliver_single_event+0x31f/0x8c0 [ 66.655513][ T5840] ? __pfx_snd_seq_deliver_single_event+0x10/0x10 [ 66.655530][ T5840] ? __lock_acquire+0x49f/0x1a40 [ 66.655559][ T5840] snd_seq_deliver_event+0x44b/0x860 [ 66.655575][ T5840] ? do_raw_spin_lock+0x128/0x260 [ 66.655594][ T5840] ? __pfx_snd_seq_deliver_event+0x10/0x10 [ 66.655609][ T5840] ? mark_held_locks+0x40/0x70 [ 66.655633][ T5840] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 66.655653][ T5840] ? lockdep_hardirqs_on+0x78/0x100 [ 66.655675][ T5840] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 66.655695][ T5840] ? client_use_ptr+0x107/0x4b0 [ 66.655721][ T5840] snd_seq_kernel_client_dispatch+0x16f/0x1b0 [ 66.655739][ T5840] send_timer_event.isra.0+0x130/0x190 [ 66.655756][ T5840] ? __pfx_send_timer_event.isra.0+0x10/0x10 [ 66.655772][ T5840] ? lockdep_hardirqs_on+0x78/0x100 [ 66.655794][ T5840] ? snd_seq_queue_timer_set_tempo+0x199/0x510 [ 66.655817][ T5840] snd_seq_oss_timer_start+0x1db/0x320 [ 66.655835][ T5840] ? __pfx_snd_seq_oss_timer_start+0x10/0x10 [ 66.655852][ T5840] ? snd_seq_oss_readq_put_timestamp+0xd1/0x260 [ 66.655876][ T5840] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 66.655898][ T5840] ? find_slot+0x166/0x1b0 [ 66.655919][ T5840] snd_seq_oss_midi_input+0x467/0xa30 [ 66.655942][ T5840] ? __pfx_snd_seq_oss_midi_input+0x10/0x10 [ 66.655966][ T5840] ? find_held_lock+0x2b/0x80 [ 66.655985][ T5840] ? snd_seq_port_use_ptr+0x128/0x190 [ 66.656010][ T5840] snd_seq_oss_event_input+0x194/0x250 [ 66.656028][ T5840] ? __pfx_snd_seq_oss_event_input+0x10/0x10 [ 66.656046][ T5840] __snd_seq_deliver_single_event+0x127/0x1c0 [ 66.656064][ T5840] snd_seq_deliver_single_event+0x31f/0x8c0 [ 66.656082][ T5840] ? __pfx_snd_seq_deliver_single_event+0x10/0x10 [ 66.656098][ T5840] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 66.656117][ T5840] ? lockdep_hardirqs_on+0x78/0x100 [ 66.656138][ T5840] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 66.656163][ T5840] ? snd_seq_timer_get_cur_tick+0x50/0x70 [ 66.656186][ T5840] snd_seq_deliver_event+0x2c1/0x860 [ 66.656204][ T5840] ? __pfx_snd_seq_deliver_event+0x10/0x10 [ 66.656219][ T5840] ? mark_held_locks+0x40/0x70 [ 66.656244][ T5840] ? lockdep_hardirqs_on+0x78/0x100 [ 66.656265][ T5840] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 66.656285][ T5840] ? client_use_ptr+0x107/0x4b0 [ 66.656309][ T5840] snd_seq_kernel_client_dispatch+0x16f/0x1b0 [ 66.656327][ T5840] snd_midi_input_event+0x32f/0x470 [ 66.656352][ T5840] ? __pfx_snd_midi_input_event+0x10/0x10 [ 66.656378][ T5840] ? __pfx_snd_midi_input_event+0x10/0x10 [ 66.656401][ T5840] snd_rawmidi_input_event_work+0x61/0x80 [ 66.656420][ T5840] process_one_work+0xa23/0x1940 [ 66.656448][ T5840] ? __pfx_process_one_work+0x10/0x10 [ 66.656475][ T5840] ? __pfx_snd_rawmidi_input_event_work+0x10/0x10 [ 66.656494][ T5840] worker_thread+0x5ef/0xe50 [ 66.656519][ T5840] ? __pfx_worker_thread+0x10/0x10 [ 66.656542][ T5840] ? kthread+0x13a/0x450 [ 66.656563][ T5840] ? __pfx_worker_thread+0x10/0x10 [ 66.656585][ T5840] kthread+0x370/0x450 [ 66.656607][ T5840] ? __pfx_kthread+0x10/0x10 [ 66.656630][ T5840] ret_from_fork+0x72b/0xd50 [ 66.656650][ T5840] ? __pfx_ret_from_fork+0x10/0x10 [ 66.656671][ T5840] ? __switch_to+0x800/0x10f0 [ 66.656696][ T5840] ? __pfx_kthread+0x10/0x10 [ 66.656718][ T5840] ret_from_fork_asm+0x1a/0x30 [ 66.656746][ T5840] [ 66.958845][ C0] select_fallback_rq: 136 callbacks suppressed [ 66.958858][ C0] process 6289 (syz.3.99) no longer affine to cpu1 [ 66.973091][ T27] numa_remove_cpu cpu 1 node 0: mask now 0,2-3 [ 66.975451][ T27] numa_remove_cpu cpu 1 node 1: mask now 0,2-3 [ 66.980011][ T6295] smpboot: CPU 1 is now offline [ 71.008395][ T1434] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.011219][ T1434] ieee802154 phy1 wpan1: encryption failed: -22