last executing test programs: 21.605913973s ago: executing program 2 (id=82): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) unshare(0x2040400) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r4, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r5 = syz_pidfd_open(0x0, 0x0) setns(r5, 0x2000000) sched_setaffinity(r2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r6 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r6, 0x1, 0x23, &(0x7f00000000c0)=0xfd83, 0x4) 21.342678453s ago: executing program 0 (id=86): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001d80)={0x1, 0x0, [{0xeeeea800, 0x1000, &(0x7f0000000ac0)=""/4096}]}) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f00000001c0)=0x304008000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x29) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000300)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x10a942, 0x9f667fd378a54ed4) write$P9_RREADLINK(r3, &(0x7f0000000040)={0x10, 0x17, 0x2, {0xffffffffffffffc1, './file0'}}, 0xfffffdab) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0x0, 0x7fff0001}]}) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000040)={0xfffffeff}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 19.548851788s ago: executing program 2 (id=91): modify_ldt$write2(0x11, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r2, &(0x7f0000005700)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x0, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x1, "56805c734ee222c29de4125f81f6e030a5441a99f362cd24e0a1ac2291500733", "467f517bd818d5a4a8d26ae61b4cbf13", {"31ffc21d2e9bfb1eb3c03976ed837b6f", "876605ac29dcb96a8901e0711afb3db3"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x64, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070, 0x0, '\x00', 0x0, 0x25, r0}, 0x94) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f00000001c0)={0x1, 0x0, 0x0}) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) mknodat$loop(0xffffffffffffff9c, 0x0, 0x1000, 0x0) acct(&(0x7f0000000040)='./file0\x00') open$dir(&(0x7f00000000c0)='./file0\x00', 0x8400, 0x2) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000007300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000006200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x282a40, 0x0) 19.239294114s ago: executing program 1 (id=94): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) socket(0x2b, 0x1, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xfffd, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) openat$kvm(0xffffffffffffff9c, 0x0, 0x101000, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) socket$nl_netfilter(0x10, 0x3, 0xc) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x1, 0x2) 19.2296367s ago: executing program 0 (id=95): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) syz_emit_ethernet(0x42, &(0x7f0000000380)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x6, 0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x11, 0x0, @local, @local, {[@lsrr={0x83, 0x3}]}}}}}}}, 0x0) 18.004233917s ago: executing program 0 (id=97): r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x50, 0x7, 0x8}, {0x28, 0x4, 0x1a, 0x40}, {0x6, 0x23, 0x3, 0x209}]}, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="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"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000009e40)=ANY=[@ANYBLOB="380000001a0001000000000000e1ffff80808000000000000000000014000100fc00000000000000000000000000000008000f0007"], 0x38}}, 0x0) r3 = syz_ublk_setup_io_uring(0x7501, &(0x7f00000008c0)={0x0, 0xba29, 0x2, 0x2, 0x29c}, &(0x7f0000000200), &(0x7f0000000600), &(0x7f0000000300)) r4 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000080)='./bus\x00', 0x200880, &(0x7f0000000000)={[{@file_umask={'file_umask', 0x3d, 0x8}}, {@iocharset={'iocharset', 0x3d, 'cp860'}}, {@codepage={'codepage', 0x3d, 'maciceland'}}, {@umask={'umask', 0x3d, 0x5}}]}, 0x4, 0x349, &(0x7f0000000980)="$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") r9 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r9, &(0x7f0000000280)=""/59, 0x5e) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x28001}, 0x8000) r11 = syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000000200)={0x2e, 0xc, 0x0, r4, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x3, 0x104}}}, &(0x7f0000000300)) syz_open_dev$ublk_chdev(&(0x7f00000000c0), r11, 0x200000) r12 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x1ae7, 0x0, 0x2, 0x151, 0x0, r3}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r12, r13, r14, r15, &(0x7f0000000580)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x45}}}, &(0x7f0000000480)=0x0) r18 = socket$inet6_tcp(0xa, 0x1, 0x0) r19 = syz_open_dev$tty1(0xc, 0x4, 0x1) r20 = dup(r19) ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0xc4089434, &(0x7f0000000080)={0x1, 0x500}) write$UHID_INPUT(r20, &(0x7f0000001040)={0xe, {"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", 0x1040}}, 0x1006) r21 = dup(r18) syz_ublk_setup_queues(r21, r17, &(0x7f0000000500)={0x0, 0x694f, 0x447a, 0x1, 0x36f, 0x0, r3}, &(0x7f0000004240)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x800, 0x0, 0x10000008, 0x0, r12}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x338a, 0x10000, 0x2, 0x27c, 0x0, r21}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x18, 0x1, 0x388, 0x0, r20}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x29a7, 0x8000, 0x2000002, 0x356}}], 0x1, &(0x7f0000000340)={0x2e, 0x6, 0x4500, r21, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, r16, '\x00', {0x82, 0x0, 0x0, 0x0}}, 0x0) 15.920693249s ago: executing program 0 (id=100): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000080)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ff8, 0x0, 0x0, 0x10, 0xd, "faf900000080149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d665f985881a350000ddffffff00", "32d8cc964e3e2874df2cfc06c89f3d9e234b305d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a4b8aed1ef800", "715200601a8ca5b07dcc141802c4dacf162e43ac61f7ad330000000000a04100", [0x100, 0xa]}}) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0x5, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r5, 0x0, 0x0) r6 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@remote, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x800000000000, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x2, 0x1, 0x7}}, 0xe8) sendmmsg(r6, &(0x7f0000000480), 0x2e9, 0x0) 15.863412341s ago: executing program 3 (id=101): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) unshare(0x2040400) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r4, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r5 = syz_pidfd_open(0x0, 0x0) setns(r5, 0x2000000) sched_setaffinity(r2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r6 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r6, 0x1, 0x23, &(0x7f00000000c0)=0xfd83, 0x4) 14.226775668s ago: executing program 3 (id=102): socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x80002, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) fcntl$setstatus(r1, 0x4, 0x800) ioctl(r1, 0x8934, &(0x7f00000002c0)="657468310000000000000000000000cf06000000c40ff3075b04dc727a8b9bc395a2e0f662de91f6b95cfbf004c8bcf76d2bba4f29276179f5ebe0d3a4f3f508a34cc0015792690151925b083904b755ffaf8415d5ef35b2493f5f97b125c30dd2e8148024e60cb8646ccf3e8366fd7469577f7ca0419d1e0dc47d7a3ebebe4a082cb14e418d3362f11cf5a9abaeb32c5c7ec13b30f73137654dcbcd47d417c366a317c4a41a13a00483208bd603042496419eb89e36febeae1a31dc8d9a717905c1b4a09e8689719b2f1332e09f336f2a4c499aebc0b8cf98") ioctl(r1, 0x8914, &(0x7f00000000c0)="6c61706230000000000000000000000001000000") r2 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x34004000) sendmmsg(r2, &(0x7f000000ad40)=[{{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000040)="66bfdcf8156709246ddd266fa0f213eb5a3351", 0x13}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4020044) bind$x25(r1, &(0x7f0000000080), 0x12) connect$x25(r1, &(0x7f0000000100)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000400)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000c40), 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_clone3(&(0x7f000000dd80)={0xa04400, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58) r6 = openat$cgroup_procs(r5, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000240), 0x12) 14.184898264s ago: executing program 4 (id=103): fchdir(0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYRES32, @ANYRESOCT=0x0, @ANYRESOCT=0x0], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = syz_open_dev$video4linux(&(0x7f0000000040), 0xfa85, 0x80000) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000080)={0x0, @reserved}) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(r1, &(0x7f0000000280)='net/ip_vs_stats\x00') init_module(&(0x7f0000000d40)=ANY=[], 0xa99, &(0x7f0000001800)='GPL\x00') sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000d00)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffc}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000400)="b8", 0x1}], 0x1, 0x0, 0x0, 0xff000000}}], 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x5000, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {}, {0x2, 0xfff1}}, [@qdisc_kind_options=@q_red={{0x8}, {0x4}}]}, 0x30}}, 0x4008000) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@redirect_dir_off, 0x3a}], [], 0x2f}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) 13.064332491s ago: executing program 4 (id=104): syz_open_procfs(0x0, &(0x7f0000000080)='net/netfilter\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYRES32, @ANYRESOCT=0x0, @ANYRESOCT=0x0], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = syz_open_dev$video4linux(&(0x7f0000000040), 0xfa85, 0x80000) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000080)={0x0, @reserved}) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(r1, &(0x7f0000000280)='net/ip_vs_stats\x00') init_module(&(0x7f0000000d40)=ANY=[], 0xa99, &(0x7f0000001800)='GPL\x00') sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000d00)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffc}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000400)="b8", 0x1}], 0x1, 0x0, 0x0, 0xff000000}}], 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x5000, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {}, {0x2, 0xfff1}}, [@qdisc_kind_options=@q_red={{0x8}, {0x4}}]}, 0x30}}, 0x4008000) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000001840)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x81100) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) 11.935601964s ago: executing program 4 (id=105): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x0, 0x0) syz_open_dev$usbmon(0x0, 0x7, 0x200000) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 11.668839568s ago: executing program 0 (id=106): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) socket(0x2b, 0x1, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xfffd, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) openat$kvm(0xffffffffffffff9c, 0x0, 0x101000, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) socket$nl_netfilter(0x10, 0x3, 0xc) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x1, 0x2) 10.100121476s ago: executing program 4 (id=107): modify_ldt$write2(0x11, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r2, &(0x7f0000005700)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x0, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x1, "56805c734ee222c29de4125f81f6e030a5441a99f362cd24e0a1ac2291500733", "467f517bd818d5a4a8d26ae61b4cbf13", {"31ffc21d2e9bfb1eb3c03976ed837b6f", "876605ac29dcb96a8901e0711afb3db3"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x64, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070, 0x0, '\x00', 0x0, 0x25, r0}, 0x94) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f00000001c0)={0x1, 0x0, 0x0}) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) mknodat$loop(0xffffffffffffff9c, 0x0, 0x1000, 0x0) acct(&(0x7f0000000040)='./file0\x00') open$dir(&(0x7f00000000c0)='./file0\x00', 0x8400, 0x2) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000007300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000006200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bind$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x282a40, 0x0) 9.939670669s ago: executing program 2 (id=108): open(&(0x7f00000000c0)='./bus\x00', 0x18d03e, 0x0) open(&(0x7f00000004c0)='./bus\x00', 0xc2802, 0x181) socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="0180c200000000000000000008004500001c0000000010029078ac1e0001e000000111009078e0000001144a1ba2"], 0x0) prlimit64(0x0, 0xc, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$packet(0x11, 0x3, 0x300) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r1, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x2}, 0x14) shutdown(r1, 0x1) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="140000001300015b993dde440113e90006"], 0x14}], 0x1}, 0x0) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, 0x0, 0x4000) 9.412270704s ago: executing program 1 (id=109): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000010)='proc\x00', 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r1, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x9}}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r1, 0x3, 0x6, @remote}, 0x10) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r2, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e23, 0x6, @local, 0x400}, 0x1c) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) clock_nanosleep(0x4, 0x1, 0x0, 0x0) close(r0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) getpid() sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) close(0x3) 8.414533112s ago: executing program 1 (id=110): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000019c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYRES16=r1, @ANYBLOB="090b00000000000000000500000008000300", @ANYRES32=r2], 0x1c}}, 0x0) 8.318733932s ago: executing program 2 (id=111): r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x50, 0x7, 0x8}, {0x28, 0x4, 0x1a, 0x40}, {0x6, 0x23, 0x3, 0x209}]}, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000fbdbdf25010000000000000001410000001800170000001a000000107564703a73797a3200000000546e3bf91a303e7a17da2bc03fd8ce2bee1686b9c928457f6556e3c1de5971d08ad4b5d92ed5aec136afbd9b528c74bb29a86655e9ea232f352323cead739ed80ea6441b23bc628a9f6777e5a201a4fc17b7c8c0cc338f53b95223b48b9904d8b3bb436718853a9eb7fe47e973c64cb0232bded5a520cee67f44df78a3101efc78d482e930bd05c6c13967589007d33c5b35230c00001e8584e344a3d3a7c8932ad1b6c088ce04558cdbbea0fd68ead8b60e7dfe3c0ea402cb889c59f4007fa112055ff160137cb021ff3a59cbdc16440b7195a1f6caa99b57e2e7c7f68140057fbd8f60ca2a5cf0ec88b280b73853560c3fe2c80f3a1026585309aaafa3d1446036935f5e0c0376fb0d2dc7d04a1d6f0a7dfb90a168fed3bac2197fea563ed7e625ce3b639dd704791d4d739d9700e311dd1d2e9e22e5bd2844bfc8c1c6b78db6cb135e65d3fdb4669b3469d7e0d4e19ffefad388bb867b2ea6ac3d1d7ffdf4dc0cda8179ad1f8a6d1eaa"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000009e40)=ANY=[@ANYBLOB="380000001a0001000000000000e1ffff80808000000000000000000014000100fc00000000000000000000000000000008000f0007"], 0x38}}, 0x0) r3 = syz_ublk_setup_io_uring(0x7501, &(0x7f00000008c0)={0x0, 0xba29, 0x2, 0x2, 0x29c}, &(0x7f0000000200), &(0x7f0000000600), &(0x7f0000000300)) r4 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000080)='./bus\x00', 0x200880, &(0x7f0000000000)={[{@file_umask={'file_umask', 0x3d, 0x8}}, {@iocharset={'iocharset', 0x3d, 'cp860'}}, {@codepage={'codepage', 0x3d, 'maciceland'}}, {@umask={'umask', 0x3d, 0x5}}]}, 0x4, 0x349, &(0x7f0000000980)="$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") r9 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r9, &(0x7f0000000280)=""/59, 0x5e) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x28001}, 0x8000) r11 = syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000000200)={0x2e, 0xc, 0x0, r4, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x3, 0x104}}}, &(0x7f0000000300)) syz_open_dev$ublk_chdev(&(0x7f00000000c0), r11, 0x200000) r12 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x1ae7, 0x0, 0x2, 0x151, 0x0, r3}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r12, r13, r14, r15, &(0x7f0000000580)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x45}}}, &(0x7f0000000480)=0x0) r18 = socket$inet6_tcp(0xa, 0x1, 0x0) r19 = syz_open_dev$tty1(0xc, 0x4, 0x1) r20 = dup(r19) ioctl$BTRFS_IOC_QGROUP_CREATE(0xffffffffffffffff, 0xc4089434, &(0x7f0000000080)={0x1, 0x500}) write$UHID_INPUT(r20, &(0x7f0000001040)={0xe, {"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", 0x1040}}, 0x1006) r21 = dup(r18) syz_ublk_setup_queues(r21, r17, &(0x7f0000000500)={0x0, 0x694f, 0x447a, 0x1, 0x36f, 0x0, r3}, &(0x7f0000004240)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x800, 0x0, 0x10000008, 0x0, r12}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x338a, 0x10000, 0x2, 0x27c, 0x0, r21}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x18, 0x1, 0x388, 0x0, r20}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x29a7, 0x8000, 0x2000002, 0x356}}], 0x1, &(0x7f0000000340)={0x2e, 0x6, 0x4500, r21, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, r16, '\x00', {0x82, 0x0, 0x0, 0x0}}, 0x0) 8.116983953s ago: executing program 1 (id=112): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000019c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="090b0000000000000000050000000800", @ANYRES32=r2], 0x1c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="4400000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="03800000000000001c0012800b00010067726574617000000c00028008000100", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) 7.502497215s ago: executing program 1 (id=113): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) unshare(0x2040400) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r4, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r5 = syz_pidfd_open(0x0, 0x0) setns(r5, 0x2000000) sched_setaffinity(r2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r6 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r6, 0x1, 0x23, &(0x7f00000000c0)=0xfd83, 0x4) 7.384437003s ago: executing program 2 (id=114): mmap(&(0x7f000007f000/0x1000)=nil, 0x1000, 0x1000002, 0x11012, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x10000, 0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='tmpfs\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x8, 0x3, 0x4b0, 0x0, 0x11, 0x148, 0x0, 0x0, 0x418, 0x2a8, 0x2a8, 0x418, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x320, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x0, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x221, 0x0, [{}, {}, {0x0, 0x72, 0x3}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x4, 0xfe}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {0x0, 0x0, 0xa}, {0x0, 0x7}, {}, {0x7}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {0xa4c, 0x3}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x0, 0x0, 0x0, 0x200}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfd}, {}, {}, {0x0, 0x4f}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xf}, {}, {0x0, 0x2, 0x0, 0x9}]}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x6, 0xac}}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@statistic={{0x38}, {0x1, 0x1, 0x0, 0xc473cee6, 0xfffffff8, {0x7}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x510) 5.718951543s ago: executing program 1 (id=115): sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cfg\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./cfg\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./cfg/usb_gadget/g1\x00', 0x1ff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) write(0xffffffffffffffff, &(0x7f0000000130)='0x0200\n', 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./cfg/usb_gadget/g1/functions/eem.usb0\x00', 0x1ff) kexec_load(0x800, 0x0, 0x0, 0x3e0001) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./cfg/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f00000001c0)='./cfg/usb_gadget/g1/functions/eem.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./cfg/usb_gadget/g1/configs/c.1/eem.usb0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cfg/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r1, &(0x7f0000000280)='dummy_udc.0\n', 0xc) 4.580600429s ago: executing program 2 (id=116): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x400, 0x11) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r3 = socket$inet6(0xa, 0x3, 0x8000000003c) getsockopt$sock_buf(r3, 0x1, 0x31, 0x0, &(0x7f00000002c0)) bind$tipc(r2, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x3, {0x41}}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000180)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/target/core\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/target/core/rd_mcp_0\x00', 0x1ff) write(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/functions/tcm.0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/configs\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./config/target/usb_gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/target/usb_gadget/naa.6001405123456789\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./config/target/usb_gadget/naa.6001405123456789/tpgt_1\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./config/target/usb_gadget/naa.6001405123456789/tpgt_1/nexus\x00', 0x2, 0x0) write(r4, &(0x7f0000000940)='naa', 0x3) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x1263, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0074b2c7e4000000000000000004000000000000", @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0e0000000400000004000000020000", @ANYRES32=0x1, @ANYBLOB="fcffffff00"/20, @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="00000400000000002000f1ffffff00000000000000000000000000005cdf66c43e317f64c79dd606be3520719e78eaf3518f68e82bda137c3fc2d094fa23cac510285bc328784a0e74ff2c03a363c71918cd600334670ca20ad68336799dab83460b2c5090a5b30ef112bcfc04ca00a2408116016799f9c445554c"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000001000000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b7040000000000008500000033000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x12, 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB="180000001b1c0000000000000200000095000000000000008b5af7a80f6bad29f4a618dc954b8b9480cee8722631ce3637fc6edf52e368fde86d6d000b86ac0d1af99c335ce7a73ec3d17848e5d913efd81ccb328ada0b9acb141aee619b93b9c83e79ba6479da0184241300d9c36d6cfd3db40d687a0ccc851211f5b1edea1c4208444c7baa40847a3c445d0d95075b18998bd959c8caa311314f116f6a7a08b2ef270cad8b9e"], 0x0, 0x12, 0x69, &(0x7f0000000240)=""/105, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0)={0x1, 0x8, 0xb9b, 0x5}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)=[0xffffffffffffffff, 0x1], 0x0, 0x10, 0x3}, 0x94) 4.378369901s ago: executing program 3 (id=117): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000"], 0x0, 0x26}, 0x28) 4.104500059s ago: executing program 3 (id=118): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x7}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0xffffffff, 0x0, 0x1, 0x0, 0x6}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x0, 0x3c}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x6, 0x4, 0x3, 0x0, 0x1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000019180)={0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xa8}}, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="14000000170a01020000000000000000000c0007"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x90) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0xffd8) 2.336277759s ago: executing program 0 (id=119): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000010)='proc\x00', 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r1, 0x3, 0x6, @remote}, 0x10) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0xffff, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x201}, 0x1c) bind$inet6(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0xfffff000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) clock_nanosleep(0x4, 0x1, 0x0, 0x0) close(r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) getpid() sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000880)=ANY=[@ANYBLOB="20000000010401000000000000000000020000000a0002000000ffff020000004304b9c3374691b3776fa9332ad3a77da12609474f01e060cde8998dcdc9eadf6d4fc31cf0b9ce276d5d7a2abc643ba18bd3c330d830afc43374c73914ff716ccd6f64744c452580176c73be62050fa56fe3764e8cebe960fcb287160c03cfb21fbbcaa21e444d30f199d0c87eafb1d040084496a0c8d3d8faf7a58e2542b8715f99781760c1068b063e63fddde3b8f8a9a77e4e333da6e78438c8922aae7359774fcb0cdc06695f707c6b9c8456f4402793ea4c498d56de7d88435d8fe995658e6d9a0aa268d78433e81920"], 0x20}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @log={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xd0}}, 0x0) 2.192825959s ago: executing program 4 (id=120): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x33, 0x701, 0x0, 0x0, {0x8}, [@typed={0x6, 0x1, 0x0, 0x0, @str='!\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4880}, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x8, 0x0, 0x2, 0x3, {{0x5, 0x4, 0x2, 0x38, 0x14, 0x65, 0x0, 0x6c, 0x4, 0x0, @rand_addr=0x64010101, @multicast1}}}}) r3 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r3, &(0x7f0000000080)={0x11, 0x800, r4, 0x1, 0x0, 0x6, @multicast}, 0x23) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000880), r3) sendmsg$nl_route_sched(r3, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)=@gettclass={0x24, 0x2a, 0x100, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xd316a137443f4233, 0x1}, {0xf, 0x5}, {0xc, 0x4}}, ["", ""]}, 0x24}}, 0x0) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r0, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x8001000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x6c, r5, 0x101, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3f}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4b}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x18}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xb}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010101}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0x6c}, 0x1, 0x0, 0x0, 0x14}, 0x91) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x36, &(0x7f0000000200)={@initdev, @broadcast, 0x0}, &(0x7f0000000240)=0xc) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000280)={'ip6_vti0\x00', 0x0, 0x4, 0x0, 0x0, 0x3, 0x1, @private0, @mcast1, 0x7800, 0x7, 0x6, 0x2}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wg1\x00', 0x0}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000000800)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000007c0)={&(0x7f00000003c0)={0x3e4, r1, 0xb00, 0x70bd28, 0x25dfdbfb, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x334, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xd51d}, @ETHTOOL_A_BITSET_MASK={0xf0, 0x5, "72c21659870cd7ae90c475bf910d1cc30d643b7e6180612f7b907cb91f57849e7fb2d82c4489c69907ebe07f9fcb7dec2d301aea103e01f865f1c1a8b01044aa0b3251515d16991045ce4da8c3911d4dcb70c94431a46b4309f7a0d1ee3d278f566ed0b839e7b98e62b2225cca4ea3a7065d5acaee8de8bdd7bb4c2db9b21d775326f283c403a9de5296fbc39b57e6de6153b43c3038bff2727bb94703daf00a9044ca95d583e882e0b18db85013d4f9134de0d156fc36953b52ed003b568b64c04201f6e682ef663d0ee382bfeaf7617524448d8259ff5e7711c6891fb1589f97743d99967bb22750a88f0c"}, @ETHTOOL_A_BITSET_VALUE={0xc4, 0x4, "d084d49bf6911386851493d07ed1004b6dc67df24618612a4874f631a28a45f33785dc775e91aae17cc9f037da6865ce9a0fc22299052bef71c8aba5c27bfc3ebc5f4f06c0a10aa4e9b70c7a613cc6e720615d721dcff5bf89ad04b467086c5c80c59d69430f96d89b9cb7470fb82975f172a00baba40bac060cdfa7ca69f0bd5141d61d3dce40631d0a45ec1b16ba70a1c64d864fb18f8f5cda9ba2295f994a4e6c4f2ec969f5813183eb839c5168ac9cfa2ed79056cd50b51ef61c95293621"}, @ETHTOOL_A_BITSET_BITS={0xf8, 0x3, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, ']#].\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '}+:%\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '!\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '-$\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '!\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '@[.:\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '\x80&\'+&(^[\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '+)%\'G(--\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '!\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa56}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'F$))^\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4fdf10a0}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_MASK={0x4b, 0x5, "e6e310d59535c787cdf9b7f6bc1901652c48cde8bebbe9a9a21ad222f4e5b0ba038f40360bc665708f1ce27005aa7c94fbf3d0b84b215b0bf4b6fa52097d9231817917414b51f2"}, @ETHTOOL_A_BITSET_VALUE={0x29, 0x4, "94fd1f1bd19d9540c18ba5f1f3e6cd0308927f3006c2b550d68864843c70ebb774b5748c07"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x3e4}, 0x1, 0x0, 0x0, 0x4004095}, 0x4000011) 2.046780894s ago: executing program 3 (id=121): open(&(0x7f00000000c0)='./bus\x00', 0x18d03e, 0x0) open(&(0x7f00000004c0)='./bus\x00', 0xc2802, 0x181) socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="0180c200000000000000000008004500001c0000000010029078ac1e0001e000000111009078e0000001144a1ba2"], 0x0) prlimit64(0x0, 0xc, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$packet(0x11, 0x3, 0x300) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r1, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x2}, 0x14) shutdown(r1, 0x1) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="140000001300015b993dde440113e90006"], 0x14}], 0x1}, 0x0) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x40030000000000}, 0x4000) 36.922877ms ago: executing program 3 (id=122): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000f01674057a21320dbd0010203010902120001000000000904", @ANYRES16], 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000380)={0x11, 0x1, 0x3, "33c500100000000040fcd817a45b729fd5085780ee0f00", 0x20363059}) r2 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0xfdef}], 0x1}, 0x0) recvmsg(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000080)=""/248, 0xf8}], 0x1, 0x0, 0x18}, 0x10100) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) sendmsg$MPTCP_PM_CMD_REMOVE(r3, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x58, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x6}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x60000014) close(r3) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8b34, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f00000000c0)={0x26e8, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000009000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0x6c, 0x0, 0x0) ioctl$KVM_NMI(r6, 0xae9a) ioctl$KVM_RUN(r6, 0xae80, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@mpls_delroute={0x38, 0x19, 0x800, 0x70bd26, 0x25dfdbfd, {0x1c, 0x14, 0x14, 0x0, 0xfe, 0x2, 0xc8, 0xb, 0x4100}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x2f, 0x1, r7}}, @RTA_DST={0x8}, @RTA_DST={0x8, 0x1, {0x2}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004000}, 0x40000) 0s ago: executing program 4 (id=123): open(0x0, 0x18d03e, 0x0) open(0x0, 0xc2802, 0x181) quotactl_fd$Q_SETINFO(0xffffffffffffffff, 0xffffffff80000600, 0x0, 0x0) socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="0180c200000000000000000008004500001c0000000010029078ac1e0001e000000111009078e0000001144a1ba2"], 0x0) prlimit64(0x0, 0xc, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$packet(0x11, 0x3, 0x300) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r1, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x2}, 0x14) shutdown(r1, 0x1) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="140000001300015b993dde440113e90006"], 0x14}], 0x1}, 0x0) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="270e28bd70000000000004"], 0x14}, 0x1, 0x40030000000000}, 0x4000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.185' (ED25519) to the list of known hosts. [ 79.922445][ T5603] cgroup: Unknown subsys name 'net' [ 80.050516][ T5603] cgroup: Unknown subsys name 'cpuset' [ 80.058658][ T5603] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 81.770426][ T5603] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.218117][ T5616] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.226759][ T5616] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.234721][ T5616] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.243554][ T5616] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.251827][ T5616] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.324914][ T5616] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.333356][ T5616] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.340863][ T5616] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.358208][ T5616] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.365983][ T5616] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.388981][ T52] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.396270][ T52] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.406031][ T52] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.419082][ T5625] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.444022][ T5623] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.478851][ T5623] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.488921][ T5623] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.501465][ T5623] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.510110][ T5623] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.518942][ T5623] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.542304][ T5625] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 86.550978][ T5625] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 86.552562][ T5625] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 86.559500][ T5625] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 86.563187][ T5625] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 88.316639][ T5616] Bluetooth: hci0: command tx timeout [ 88.477360][ T5616] Bluetooth: hci1: command tx timeout [ 88.536088][ T5627] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.543478][ T5627] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.543699][ T5627] bridge_slave_0: entered allmulticast mode [ 88.548868][ T5627] bridge_slave_0: entered promiscuous mode [ 88.557495][ T5616] Bluetooth: hci3: command tx timeout [ 88.557617][ T5616] Bluetooth: hci2: command tx timeout [ 88.571599][ T5627] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.571901][ T5627] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.572249][ T5627] bridge_slave_1: entered allmulticast mode [ 88.578170][ T5627] bridge_slave_1: entered promiscuous mode [ 88.636488][ T5625] Bluetooth: hci4: command tx timeout [ 88.708390][ T5614] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.708801][ T5614] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.709864][ T5614] bridge_slave_0: entered allmulticast mode [ 88.714739][ T5614] bridge_slave_0: entered promiscuous mode [ 88.756088][ T5627] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.774524][ T5614] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.774976][ T5614] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.775444][ T5614] bridge_slave_1: entered allmulticast mode [ 88.780932][ T5614] bridge_slave_1: entered promiscuous mode [ 88.817483][ T5627] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.901730][ T5614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.920727][ T5620] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.921897][ T5620] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.922260][ T5620] bridge_slave_0: entered allmulticast mode [ 88.928192][ T5620] bridge_slave_0: entered promiscuous mode [ 88.965782][ T5614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.967293][ T5622] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.967620][ T5622] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.973113][ T5622] bridge_slave_0: entered allmulticast mode [ 88.978721][ T5622] bridge_slave_0: entered promiscuous mode [ 88.985843][ T5620] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.986305][ T5620] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.986654][ T5620] bridge_slave_1: entered allmulticast mode [ 88.994108][ T5620] bridge_slave_1: entered promiscuous mode [ 89.045866][ T5627] team0: Port device team_slave_0 added [ 89.076413][ T5622] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.076726][ T5622] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.077150][ T5622] bridge_slave_1: entered allmulticast mode [ 89.083412][ T5622] bridge_slave_1: entered promiscuous mode [ 89.115485][ T5620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.125327][ T5627] team0: Port device team_slave_1 added [ 89.178715][ T5620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.197280][ T5626] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.197813][ T5626] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.198189][ T5626] bridge_slave_0: entered allmulticast mode [ 89.203026][ T5626] bridge_slave_0: entered promiscuous mode [ 89.216070][ T5614] team0: Port device team_slave_0 added [ 89.230977][ T5622] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.250082][ T5627] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.250219][ T5627] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.250316][ T5627] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.254918][ T5626] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.258055][ T5626] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.258416][ T5626] bridge_slave_1: entered allmulticast mode [ 89.269116][ T5626] bridge_slave_1: entered promiscuous mode [ 89.326553][ T5614] team0: Port device team_slave_1 added [ 89.332853][ T5622] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.363440][ T5620] team0: Port device team_slave_0 added [ 89.369455][ T5627] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.369483][ T5627] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.370058][ T5627] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.451851][ T5620] team0: Port device team_slave_1 added [ 89.466677][ T5626] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.470448][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.470492][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.470557][ T5614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.490830][ T5622] team0: Port device team_slave_0 added [ 89.534032][ T5626] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.538219][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.538270][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.538344][ T5614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.549450][ T5622] team0: Port device team_slave_1 added [ 89.651060][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.651220][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.651325][ T5620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.699503][ T5622] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.699548][ T5622] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.699575][ T5622] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.745133][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.745180][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.745224][ T5620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.790786][ T5626] team0: Port device team_slave_0 added [ 89.795842][ T5622] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.795885][ T5622] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.795952][ T5622] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.848521][ T5627] hsr_slave_0: entered promiscuous mode [ 89.851796][ T5627] hsr_slave_1: entered promiscuous mode [ 89.896638][ T5626] team0: Port device team_slave_1 added [ 89.949064][ T5614] hsr_slave_0: entered promiscuous mode [ 89.951813][ T5614] hsr_slave_1: entered promiscuous mode [ 89.954014][ T5614] debugfs: 'hsr0' already exists in 'hsr' [ 89.954252][ T5614] Cannot create hsr debugfs directory [ 89.980205][ T5626] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.980365][ T5626] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.980468][ T5626] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.050844][ T5626] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.051483][ T5626] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.051567][ T5626] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.125369][ T5622] hsr_slave_0: entered promiscuous mode [ 90.129522][ T5622] hsr_slave_1: entered promiscuous mode [ 90.131663][ T5622] debugfs: 'hsr0' already exists in 'hsr' [ 90.131705][ T5622] Cannot create hsr debugfs directory [ 90.159123][ T5620] hsr_slave_0: entered promiscuous mode [ 90.163789][ T5620] hsr_slave_1: entered promiscuous mode [ 90.165838][ T5620] debugfs: 'hsr0' already exists in 'hsr' [ 90.165900][ T5620] Cannot create hsr debugfs directory [ 90.330371][ T5626] hsr_slave_0: entered promiscuous mode [ 90.333315][ T5626] hsr_slave_1: entered promiscuous mode [ 90.335340][ T5626] debugfs: 'hsr0' already exists in 'hsr' [ 90.335397][ T5626] Cannot create hsr debugfs directory [ 90.396409][ T5625] Bluetooth: hci0: command tx timeout [ 90.566371][ T5625] Bluetooth: hci1: command tx timeout [ 90.646827][ T5625] Bluetooth: hci2: command tx timeout [ 90.646886][ T5625] Bluetooth: hci3: command tx timeout [ 90.716569][ T5616] Bluetooth: hci4: command tx timeout [ 90.766409][ T5627] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 90.781069][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 90.805042][ T5627] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 90.815388][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 90.823664][ T5627] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 90.834426][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 90.863410][ T5627] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 90.874322][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 90.949083][ T5620] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 90.962348][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 90.976063][ T5620] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 90.986083][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 90.993291][ T5620] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 91.004163][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 91.024479][ T5620] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 91.034576][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 91.120233][ T5614] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 91.131666][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 91.136069][ T5614] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 91.147908][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 91.161925][ T5614] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 91.174991][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 91.180510][ T5614] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 91.191807][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 91.307623][ T5622] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 91.321319][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 91.333401][ T5627] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.347520][ T5622] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 91.358234][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 91.360715][ T5622] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 91.374143][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 91.395050][ T5622] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 91.405708][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 91.499870][ T5626] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.509562][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 91.520444][ T5627] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.530499][ T5626] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.542573][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 91.562084][ T5620] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.569331][ T5626] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.580601][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 91.597438][ T5626] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.609496][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 91.626474][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.626852][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.668921][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.669193][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.712472][ T5620] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.738781][ T1405] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.739097][ T1405] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.789502][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.789744][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.844267][ T1232] cfg80211: failed to load regulatory.db [ 91.882562][ T5614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.976858][ T5614] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.019550][ T5620] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 92.046780][ T1405] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.046907][ T1405] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.089226][ T5622] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.103194][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.103322][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.173449][ T5626] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.235142][ T5622] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.285120][ T5626] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.305925][ T27] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.306315][ T27] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.350822][ T27] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.351081][ T27] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.389807][ T27] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.390097][ T27] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.454585][ T27] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.454866][ T27] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.476599][ T5616] Bluetooth: hci0: command tx timeout [ 92.637122][ T5616] Bluetooth: hci1: command tx timeout [ 92.718683][ T5616] Bluetooth: hci3: command tx timeout [ 92.719902][ T5616] Bluetooth: hci2: command tx timeout [ 92.800794][ T5625] Bluetooth: hci4: command tx timeout [ 92.951761][ T5627] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.159522][ T5627] veth0_vlan: entered promiscuous mode [ 93.203829][ T5627] veth1_vlan: entered promiscuous mode [ 93.340419][ T5627] veth0_macvtap: entered promiscuous mode [ 93.372845][ T5627] veth1_macvtap: entered promiscuous mode [ 93.435790][ T5627] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.507808][ T5627] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.577354][ T5620] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.596872][ T50] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.597060][ T50] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.597118][ T50] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.597160][ T50] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.859098][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.859154][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.937572][ T5614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.964897][ T5620] veth0_vlan: entered promiscuous mode [ 94.004037][ T5622] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.023009][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.023055][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.056362][ T5620] veth1_vlan: entered promiscuous mode [ 94.111350][ T5626] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.163958][ T5627] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 94.220232][ T5620] veth0_macvtap: entered promiscuous mode [ 94.247182][ T5620] veth1_macvtap: entered promiscuous mode [ 94.346896][ T5803] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 94.365932][ T5622] veth0_vlan: entered promiscuous mode [ 94.432042][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.453104][ T5626] veth0_vlan: entered promiscuous mode [ 94.465577][ T5622] veth1_vlan: entered promiscuous mode [ 94.496781][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.511446][ T5626] veth1_vlan: entered promiscuous mode [ 94.556570][ T5625] Bluetooth: hci0: command tx timeout [ 94.568498][ T50] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.578133][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.578182][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.578221][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.716794][ T5625] Bluetooth: hci1: command tx timeout [ 94.735466][ T5626] veth0_macvtap: entered promiscuous mode [ 94.750319][ T5622] veth0_macvtap: entered promiscuous mode [ 94.788021][ T5626] veth1_macvtap: entered promiscuous mode [ 94.796091][ T5622] veth1_macvtap: entered promiscuous mode [ 94.796678][ T5625] Bluetooth: hci2: command tx timeout [ 94.796722][ T5625] Bluetooth: hci3: command tx timeout [ 94.859648][ T1014] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.859687][ T1014] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.877707][ T5616] Bluetooth: hci4: command tx timeout [ 94.896568][ T5614] veth0_vlan: entered promiscuous mode [ 94.908828][ T5626] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.929959][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.952483][ T5626] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.975846][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.993776][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.002501][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.010438][ T5614] veth1_vlan: entered promiscuous mode [ 95.012195][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.069106][ T50] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.069212][ T50] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.069277][ T50] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.069315][ T50] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.069356][ T50] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.069394][ T50] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.069457][ T50] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.294724][ T5614] veth0_macvtap: entered promiscuous mode [ 95.346932][ T5814] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 95.358744][ T5614] veth1_macvtap: entered promiscuous mode [ 95.368549][ T1014] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.368586][ T1014] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.449767][ T1014] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.458365][ T1014] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.327222][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.352211][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.352264][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.429237][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.698526][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.698607][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.698646][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.698877][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.748150][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.777462][ T84] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.146565][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 98.479580][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.495616][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.719141][ T1358] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.746294][ T1358] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.796581][ T5625] Bluetooth: hci4: command 0x0405 tx timeout [ 102.042906][ T5853] veth0: entered promiscuous mode [ 102.050031][ T5853] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 102.177668][ T5855] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 102.600538][ T5857] netlink: 16 bytes leftover after parsing attributes in process `syz.1.15'. [ 103.448496][ T5853] veth0: left promiscuous mode [ 103.468483][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 103.629290][ T9] usb 2-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice=d0.db [ 103.651159][ T9] usb 2-1: config 0 has an invalid interface number: 255 but max is 0 [ 103.651214][ T9] usb 2-1: config 0 has no interface number 0 [ 103.651247][ T9] usb 2-1: config 0 interface 255 has no altsetting 0 [ 103.662044][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.662127][ T9] usb 2-1: Product: syz [ 103.662168][ T9] usb 2-1: Manufacturer: syz [ 103.662209][ T9] usb 2-1: SerialNumber: syz [ 103.724766][ T9] usb 2-1: config 0 descriptor?? [ 103.908505][ T5871] netlink: 12 bytes leftover after parsing attributes in process `syz.4.22'. [ 104.082743][ T5875] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 107.673040][ T31] usb 2-1: USB disconnect, device number 2 [ 110.033504][ T5934] veth0: entered promiscuous mode [ 110.111059][ T5935] syz.1.26 uses obsolete (PF_INET,SOCK_PACKET) [ 111.356299][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 112.048538][ T5941] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 112.538149][ T5950] i2c i2c-0: new_device: Extra parameters [ 112.616896][ T5951] Invalid ELF header magic: != ELF [ 112.630120][ T5951] ======================================================= [ 112.630120][ T5951] WARNING: The mand mount option has been deprecated and [ 112.630120][ T5951] and is ignored by this kernel. Remove the mand [ 112.630120][ T5951] option from the mount to silence this warning. [ 112.630120][ T5951] ======================================================= [ 112.635450][ T5951] overlay: Bad value for 'redirect_dir' [ 113.473566][ T5934] veth0: left promiscuous mode [ 113.575509][ T5958] syzkaller0: entered promiscuous mode [ 113.601631][ T5958] syzkaller0: entered allmulticast mode [ 113.625480][ T5958] tipc: Started in network mode [ 113.633319][ T5958] tipc: Node identity 660f095dcc7b, cluster identity 4711 [ 113.642725][ T5958] tipc: Enabled bearer , priority 0 [ 113.658033][ T5957] tipc: Resetting bearer [ 113.706372][ T5719] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 113.866504][ T5719] usb 5-1: Using ep0 maxpacket: 32 [ 113.891937][ T5719] usb 5-1: unable to get BOS descriptor or descriptor too short [ 113.904408][ T5719] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 113.939608][ T5719] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 113.954914][ T5719] usb 5-1: config 0 has no interfaces? [ 113.988834][ T5719] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.997756][ T5719] usb 5-1: Product: syz [ 113.997854][ T5719] usb 5-1: Manufacturer: syz [ 113.997952][ T5719] usb 5-1: SerialNumber: syz [ 114.508628][ T5719] usb 5-1: config 0 descriptor?? [ 114.892079][ T5957] tipc: Disabling bearer [ 114.974189][ T5719] tipc: Node number set to 2859731293 [ 116.176250][ T5632] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 116.430244][ T5632] usb 2-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice=d0.db [ 116.441435][ T5632] usb 2-1: config 0 has an invalid interface number: 255 but max is 0 [ 116.441462][ T5632] usb 2-1: config 0 has no interface number 0 [ 116.441492][ T5632] usb 2-1: config 0 interface 255 has no altsetting 0 [ 116.448436][ T5632] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.448509][ T5632] usb 2-1: Product: syz [ 116.448558][ T5632] usb 2-1: Manufacturer: syz [ 116.448606][ T5632] usb 2-1: SerialNumber: syz [ 116.493918][ T5632] usb 2-1: config 0 descriptor?? [ 118.430985][ T5732] usb 2-1: USB disconnect, device number 3 [ 118.554849][ T5632] usb 5-1: USB disconnect, device number 2 [ 120.215244][ T6000] tipc: Enabling of bearer rejected, failed to enable media [ 120.223162][ T6000] netlink: 'syz.1.46': attribute type 1 has an invalid length. [ 120.333960][ T6003] syzkaller0: entered promiscuous mode [ 120.339897][ T6003] syzkaller0: entered allmulticast mode [ 120.444799][ T6000] loop1: detected capacity change from 0 to 64 [ 120.599000][ T6008] warning: `syz.4.49' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 120.793675][ T6011] 9p: Bad value for 'wfdno' [ 121.680017][ T6026] Invalid ELF header magic: != ELF [ 126.306222][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 126.761370][ T6089] netlink: 16 bytes leftover after parsing attributes in process `syz.2.53'. [ 127.447004][ T5632] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 127.598592][ T5632] usb 3-1: Using ep0 maxpacket: 32 [ 127.604284][ T5632] usb 3-1: unable to get BOS descriptor or descriptor too short [ 127.604389][ T5632] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 127.624650][ T5632] usb 3-1: config 14 has an invalid interface number: 57 but max is 1 [ 127.624707][ T5632] usb 3-1: config 14 has an invalid interface number: 228 but max is 1 [ 127.624748][ T5632] usb 3-1: config 14 has no interface number 0 [ 127.624811][ T5632] usb 3-1: config 14 has no interface number 1 [ 127.625005][ T5632] usb 3-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 127.625070][ T5632] usb 3-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 127.625137][ T5632] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 127.625209][ T5632] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 127.625283][ T5632] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 127.625348][ T5632] usb 3-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 127.625420][ T5632] usb 3-1: config 14 interface 57 has no altsetting 0 [ 127.625472][ T5632] usb 3-1: config 14 interface 228 has no altsetting 0 [ 127.708076][ T5632] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.708146][ T5632] usb 3-1: Product: syz [ 127.708187][ T5632] usb 3-1: Manufacturer: syz [ 127.708227][ T5632] usb 3-1: SerialNumber: syz [ 128.256523][ T6111] Invalid ELF header magic: != ELF [ 128.267913][ T6111] overlay: Bad value for 'redirect_dir' [ 128.855642][ T5632] legousbtower 3-1:14.57: interrupt endpoints not found [ 128.909376][ T5632] legousbtower 3-1:14.228: get version request failed: -71 [ 128.920604][ T5632] legousbtower 3-1:14.228: probe with driver legousbtower failed with error -71 [ 128.986892][ T5632] usb 3-1: USB disconnect, device number 2 [ 129.386764][ T6125] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 131.426153][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 132.801553][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.801688][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.986150][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 135.278866][ T6139] veth0: entered promiscuous mode [ 135.284260][ T6142] veth0: left promiscuous mode [ 135.336230][ T5745] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 135.526312][ T5745] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 135.556870][ T5745] usb 4-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 4 [ 135.558671][ T5745] usb 4-1: config 0 interface 0 has no altsetting 0 [ 135.596865][ T5745] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 135.596911][ T5745] usb 4-1: Product: syz [ 135.596944][ T5745] usb 4-1: Manufacturer: syz [ 135.597310][ T5745] usb 4-1: SerialNumber: syz [ 135.721902][ T5745] usb 4-1: config 0 descriptor?? [ 135.927534][ T5745] usb 4-1: selecting invalid altsetting 0 [ 137.995486][ T6168] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 138.039247][ T6168] batman_adv: batadv0: Adding interface: gretap1 [ 138.039290][ T6168] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 138.039324][ T6168] batman_adv: batadv0: Interface activated: gretap1 [ 138.234924][ T6210] netlink: 'syz.0.80': attribute type 1 has an invalid length. [ 138.257363][ T6204] syzkaller0: entered promiscuous mode [ 138.257419][ T6204] syzkaller0: entered allmulticast mode [ 138.278040][ T6207] tipc: Enabling of bearer rejected, failed to enable media [ 138.293701][ T6212] 9p: Bad value for 'wfdno' [ 138.325040][ T6207] loop0: detected capacity change from 0 to 64 [ 140.096218][ T9] usb 4-1: USB disconnect, device number 2 [ 141.812648][ T6272] netlink: 12 bytes leftover after parsing attributes in process `syz.1.94'. [ 142.376461][ T5719] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 142.576469][ T5719] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 142.599442][ T5719] usb 4-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 4 [ 142.611259][ T5719] usb 4-1: config 0 interface 0 has no altsetting 0 [ 142.659200][ T5719] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 142.659304][ T5719] usb 4-1: Product: syz [ 142.659428][ T5719] usb 4-1: Manufacturer: syz [ 142.659529][ T5719] usb 4-1: SerialNumber: syz [ 142.761415][ T5719] usb 4-1: config 0 descriptor?? [ 143.197120][ T5719] usb 4-1: selecting invalid altsetting 0 [ 143.996252][ T5616] Bluetooth: hci4: command 0x0405 tx timeout [ 144.127220][ T6289] tipc: Enabling of bearer rejected, failed to enable media [ 144.161657][ T6289] netlink: 'syz.0.97': attribute type 1 has an invalid length. [ 144.409538][ T6289] loop0: detected capacity change from 0 to 64 [ 144.434981][ T5719] usb 4-1: USB disconnect, device number 3 [ 144.472263][ T6289] Zero length message leads to an empty skb [ 144.733454][ T6299] udevd[6299]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 147.180886][ T6316] Invalid ELF header magic: != ELF [ 147.196872][ T6316] overlay: Bad value for 'redirect_dir' [ 148.311195][ T6326] Invalid ELF header magic: != ELF [ 151.022462][ T6336] netlink: 12 bytes leftover after parsing attributes in process `syz.0.106'. [ 152.401969][ T6347] veth0: entered promiscuous mode [ 152.408077][ T6347] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 152.419450][ T6347] veth0: left promiscuous mode [ 152.775480][ T6354] tipc: Enabling of bearer rejected, failed to enable media [ 152.815513][ T6354] netlink: 'syz.2.111': attribute type 1 has an invalid length. [ 153.008964][ T6354] loop2: detected capacity change from 0 to 64 [ 153.154905][ T6360] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 153.183340][ T6360] batman_adv: batadv0: Adding interface: gretap1 [ 153.183394][ T6360] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 153.183427][ T6360] batman_adv: batadv0: Interface activated: gretap1 [ 158.964350][ T6424] veth0: entered promiscuous mode [ 161.036978][ T6424] veth0: left promiscuous mode [ 161.836863][ C1] [ 161.839273][ C1] ================================ [ 161.844381][ C1] WARNING: inconsistent lock state [ 161.849508][ C1] syzkaller #0 Not tainted [ 161.853928][ C1] -------------------------------- [ 161.859052][ C1] inconsistent {SOFTIRQ-ON-W} -> {IN-SOFTIRQ-W} usage. [ 161.865916][ C1] syz.4.123/6436 [HC0[0]:SC1[1]:HE1:SE0] takes: [ 161.872187][ C1] ffff8880123f2260 (sk_lock-AF_X25){+.?.}-{0:0}, at: x25_kill_by_neigh+0x10d/0x250 [ 161.881574][ C1] {SOFTIRQ-ON-W} state was registered at: [ 161.887318][ C1] lock_acquire+0x115/0x350 [ 161.891973][ C1] lock_sock_nested+0x41/0x100 [ 161.896865][ C1] x25_bind+0x209/0x450 [ 161.901136][ C1] __sys_bind+0x2e3/0x410 [ 161.905618][ C1] __x64_sys_bind+0x7a/0x90 [ 161.910458][ C1] do_syscall_64+0x166/0x510 [ 161.915185][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.921239][ C1] irq event stamp: 400850 [ 161.925593][ C1] hardirqs last enabled at (400850): [] __local_bh_enable_ip+0xd0/0x130 [ 161.935608][ C1] hardirqs last disabled at (400849): [] __local_bh_enable_ip+0x71/0x130 [ 161.945603][ C1] softirqs last enabled at (390918): [] __irq_exit_rcu+0xca/0x220 [ 161.955083][ C1] softirqs last disabled at (400717): [] __irq_exit_rcu+0xca/0x220 [ 161.964554][ C1] [ 161.964554][ C1] other info that might help us debug this: [ 161.972771][ C1] Possible unsafe locking scenario: [ 161.972771][ C1] [ 161.980225][ C1] CPU0 [ 161.983506][ C1] ---- [ 161.986785][ C1] lock(sk_lock-AF_X25); [ 161.991145][ C1] [ 161.994592][ C1] lock(sk_lock-AF_X25); [ 161.999094][ C1] [ 161.999094][ C1] *** DEADLOCK *** [ 161.999094][ C1] [ 162.007322][ C1] locks held by syz.4.123/6436: 1, last CPU#1: [ 162.013468][ C1] #0: ffffffff8eb5c820 (rcu_read_lock){....}-{1:3}, at: netif_receive_skb_core+0x33/0x2b0 [ 162.023494][ C1] [ 162.023494][ C1] stack backtrace: [ 162.029410][ C1] CPU: 1 UID: 0 PID: 6436 Comm: syz.4.123 Not tainted syzkaller #0 PREEMPT(full) [ 162.038606][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 162.048764][ C1] Call Trace: [ 162.052042][ C1] [ 162.054890][ C1] dump_stack_lvl+0xe8/0x150 [ 162.059500][ C1] print_usage_bug+0x28b/0x2e0 [ 162.064280][ C1] valid_state+0xbe/0xf0 [ 162.068533][ C1] mark_lock_irq+0x36/0x380 [ 162.073049][ C1] mark_lock+0x117/0x190 [ 162.077299][ C1] __lock_acquire+0x6b7/0x2e50 [ 162.082067][ C1] ? kasan_quarantine_put+0xbb/0x1f0 [ 162.087356][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 162.092381][ C1] ? lock_acquire+0x115/0x350 [ 162.097057][ C1] lock_acquire+0x115/0x350 [ 162.101561][ C1] ? x25_kill_by_neigh+0x10d/0x250 [ 162.106683][ C1] ? x25_kill_by_neigh+0x103/0x250 [ 162.111792][ C1] lock_sock_nested+0x41/0x100 [ 162.116677][ C1] ? x25_kill_by_neigh+0x10d/0x250 [ 162.121819][ C1] x25_kill_by_neigh+0x10d/0x250 [ 162.126809][ C1] x25_lapb_receive_frame+0x1b0/0xfb0 [ 162.132201][ C1] ? netif_receive_skb_core+0x33/0x2b0 [ 162.137768][ C1] ? netif_receive_skb_core+0x33/0x2b0 [ 162.143263][ C1] ? __pfx_x25_lapb_receive_frame+0x10/0x10 [ 162.149182][ C1] netif_receive_skb_core+0x2a6/0x2b0 [ 162.154567][ C1] lapbeth_napi_poll+0x42/0x90 [ 162.159336][ C1] __napi_poll+0xaa/0x330 [ 162.163674][ C1] net_rx_action+0x61d/0xf50 [ 162.168297][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 162.173427][ C1] ? __pfx_rcu_core+0x10/0x10 [ 162.178112][ C1] ? lapic_next_event+0x11/0x20 [ 162.182966][ C1] handle_softirqs+0x225/0x840 [ 162.187738][ C1] ? __irq_exit_rcu+0xca/0x220 [ 162.192508][ C1] __irq_exit_rcu+0xca/0x220 [ 162.197101][ C1] irq_exit_rcu+0x9/0x30 [ 162.201346][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 162.207000][ C1] [ 162.209930][ C1] [ 162.212857][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 162.218836][ C1] RIP: 0010:_raw_spin_unlock_irq+0x29/0x50 [ 162.224664][ C1] Code: 90 f3 0f 1e fa 53 48 89 fb 48 83 c7 18 48 8b 74 24 08 e8 ca 81 c5 f5 48 89 df e8 82 f9 c5 f5 e8 5d 1f f2 f5 fb bf 01 00 00 00 72 18 b7 f5 65 8b 05 cb 80 93 07 85 c0 74 07 5b c3 cc cc cc cc [ 162.244267][ C1] RSP: 0018:ffffc9000b1d7a50 EFLAGS: 00000206 [ 162.250338][ C1] RAX: 0000000000061d4b RBX: ffff888031d04438 RCX: 0000000080000001 [ 162.258311][ C1] RDX: 0000000000000000 RSI: ffffffff8e25543f RDI: 0000000000000001 [ 162.266284][ C1] RBP: ffffc9000b1d7c10 R08: ffffffff9058fd7f R09: 1ffffffff20b1faf [ 162.274256][ C1] R10: dffffc0000000000 R11: fffffbfff20b1fb0 R12: 000000000000ac47 [ 162.282240][ C1] R13: dffffc0000000000 R14: 0000000000000000 R15: 1ffff9200163af60 [ 162.290310][ C1] snd_rawmidi_write+0x59d/0xbc0 [ 162.295261][ C1] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 162.300729][ C1] ? __pfx_default_wake_function+0x10/0x10 [ 162.306552][ C1] ? common_file_perm+0x20e/0x2b0 [ 162.311584][ C1] ? bpf_lsm_file_permission+0x9/0x20 [ 162.316960][ C1] ? security_file_permission+0x75/0x260 [ 162.322622][ C1] ? rw_verify_area+0x203/0x4c0 [ 162.327478][ C1] vfs_writev+0x4bb/0x990 [ 162.331817][ C1] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 162.337288][ C1] ? __pfx_vfs_writev+0x10/0x10 [ 162.342152][ C1] ? __fget_files+0x2a/0x420 [ 162.346748][ C1] ? __fget_files+0x3a2/0x420 [ 162.351444][ C1] ? __fget_files+0x2a/0x420 [ 162.356389][ C1] do_writev+0x154/0x2e0 [ 162.360637][ C1] ? __pfx_do_writev+0x10/0x10 [ 162.365408][ C1] do_syscall_64+0x166/0x510 [ 162.370027][ C1] ? trace_irq_disable+0x3b/0x140 [ 162.375048][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.381118][ C1] ? clear_bhb_loop+0x70/0xc0 [ 162.385799][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.391692][ C1] RIP: 0033:0x7ff53979e0d9 [ 162.396132][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 162.415753][ C1] RSP: 002b:00007ff53a74c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 162.424184][ C1] RAX: ffffffffffffffda RBX: 00007ff539a25fa0 RCX: 00007ff53979e0d9 [ 162.432172][ C1] RDX: 0000000000000002 RSI: 0000200000000840 RDI: 0000000000000006 [ 162.440142][ C1] RBP: 00007ff539835024 R08: 0000000000000000 R09: 0000000000000000 [ 162.448113][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 162.456101][ C1] R13: 00007ff539a26038 R14: 00007ff539a25fa0 R15: 00007ffd367b8ba8 [ 162.464115][ C1] [ 162.467268][ C1] BUG: sleeping function called from invalid context at net/core/sock.c:3829 [ 162.467282][ C1] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 6436, name: syz.4.123 [ 162.467297][ C1] preempt_count: 101, expected: 0 [ 162.467306][ C1] RCU nest depth: 1, expected: 0 [ 162.467315][ C1] INFO: lockdep is turned off. [ 162.467321][ C1] Preemption disabled at: [ 162.467327][ C1] [<0000000000000000>] 0x0 [ 162.467349][ C1] CPU: 1 UID: 0 PID: 6436 Comm: syz.4.123 Not tainted syzkaller #0 PREEMPT(full) [ 162.467365][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 162.467374][ C1] Call Trace: [ 162.467381][ C1] [ 162.467387][ C1] dump_stack_lvl+0xe8/0x150 [ 162.467412][ C1] __might_resched+0x378/0x4d0 [ 162.467437][ C1] lock_sock_nested+0x56/0x100 [ 162.467459][ C1] x25_kill_by_neigh+0x10d/0x250 [ 162.467476][ C1] x25_lapb_receive_frame+0x1b0/0xfb0 [ 162.467495][ C1] ? netif_receive_skb_core+0x33/0x2b0 [ 162.467514][ C1] ? netif_receive_skb_core+0x33/0x2b0 [ 162.467532][ C1] ? __pfx_x25_lapb_receive_frame+0x10/0x10 [ 162.467549][ C1] netif_receive_skb_core+0x2a6/0x2b0 [ 162.467576][ C1] lapbeth_napi_poll+0x42/0x90 [ 162.467596][ C1] __napi_poll+0xaa/0x330 [ 162.467617][ C1] net_rx_action+0x61d/0xf50 [ 162.467644][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 162.467669][ C1] ? __pfx_rcu_core+0x10/0x10 [ 162.467686][ C1] ? lapic_next_event+0x11/0x20 [ 162.467705][ C1] handle_softirqs+0x225/0x840 [ 162.467725][ C1] ? __irq_exit_rcu+0xca/0x220 [ 162.467746][ C1] __irq_exit_rcu+0xca/0x220 [ 162.467765][ C1] irq_exit_rcu+0x9/0x30 [ 162.467781][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 162.467804][ C1] [ 162.467809][ C1] [ 162.467814][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 162.467830][ C1] RIP: 0010:_raw_spin_unlock_irq+0x29/0x50 [ 162.467852][ C1] Code: 90 f3 0f 1e fa 53 48 89 fb 48 83 c7 18 48 8b 74 24 08 e8 ca 81 c5 f5 48 89 df e8 82 f9 c5 f5 e8 5d 1f f2 f5 fb bf 01 00 00 00 72 18 b7 f5 65 8b 05 cb 80 93 07 85 c0 74 07 5b c3 cc cc cc cc [ 162.467864][ C1] RSP: 0018:ffffc9000b1d7a50 EFLAGS: 00000206 [ 162.467877][ C1] RAX: 0000000000061d4b RBX: ffff888031d04438 RCX: 0000000080000001 [ 162.467888][ C1] RDX: 0000000000000000 RSI: ffffffff8e25543f RDI: 0000000000000001 [ 162.467897][ C1] RBP: ffffc9000b1d7c10 R08: ffffffff9058fd7f R09: 1ffffffff20b1faf [ 162.467920][ C1] R10: dffffc0000000000 R11: fffffbfff20b1fb0 R12: 000000000000ac47 [ 162.467931][ C1] R13: dffffc0000000000 R14: 0000000000000000 R15: 1ffff9200163af60 [ 162.467948][ C1] snd_rawmidi_write+0x59d/0xbc0 [ 162.467976][ C1] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 162.467997][ C1] ? __pfx_default_wake_function+0x10/0x10 [ 162.468017][ C1] ? common_file_perm+0x20e/0x2b0 [ 162.468036][ C1] ? bpf_lsm_file_permission+0x9/0x20 [ 162.468050][ C1] ? security_file_permission+0x75/0x260 [ 162.468073][ C1] ? rw_verify_area+0x203/0x4c0 [ 162.468089][ C1] vfs_writev+0x4bb/0x990 [ 162.468110][ C1] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 162.468132][ C1] ? __pfx_vfs_writev+0x10/0x10 [ 162.468157][ C1] ? __fget_files+0x2a/0x420 [ 162.468174][ C1] ? __fget_files+0x3a2/0x420 [ 162.468187][ C1] ? __fget_files+0x2a/0x420 [ 162.468203][ C1] do_writev+0x154/0x2e0 [ 162.468223][ C1] ? __pfx_do_writev+0x10/0x10 [ 162.468247][ C1] do_syscall_64+0x166/0x510 [ 162.468269][ C1] ? trace_irq_disable+0x3b/0x140 [ 162.468282][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.468296][ C1] ? clear_bhb_loop+0x70/0xc0 [ 162.468313][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.468328][ C1] RIP: 0033:0x7ff53979e0d9 [ 162.468342][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 162.468354][ C1] RSP: 002b:00007ff53a74c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 162.468368][ C1] RAX: ffffffffffffffda RBX: 00007ff539a25fa0 RCX: 00007ff53979e0d9 [ 162.468378][ C1] RDX: 0000000000000002 RSI: 0000200000000840 RDI: 0000000000000006 [ 162.468387][ C1] RBP: 00007ff539835024 R08: 0000000000000000 R09: 0000000000000000 [ 162.468396][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 162.468405][ C1] R13: 00007ff539a26038 R14: 00007ff539a25fa0 R15: 00007ffd367b8ba8 [ 162.468422][ C1] [ 163.011771][ T32] audit: type=1800 audit(1786408226.442:2): pid=6447 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.116" name="nexus" dev="configfs" ino=10211 res=0 errno=0 [ 163.012288][ T6447] Missing 'naa.' prefix [ 163.040346][ T25] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 163.196876][ T25] usb 4-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice=d0.db [ 163.207018][ T25] usb 4-1: config 0 has an invalid interface number: 255 but max is 0 [ 163.207057][ T25] usb 4-1: config 0 has no interface number 0 [ 163.207097][ T25] usb 4-1: config 0 interface 255 has no altsetting 0 [ 163.233396][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.242217][ T25] usb 4-1: Product: syz [ 163.246580][ T25] usb 4-1: Manufacturer: syz [ 163.251305][ T25] usb 4-1: SerialNumber: syz [ 163.258708][ T25] usb 4-1: config 0 descriptor?? [ 164.610661][ T5745] usb 4-1: USB disconnect, device number 4