last executing test programs: 7.18296042s ago: executing program 1 (id=6): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1cd) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/phonet.usb0\x00', 0x1ff) symlinkat(&(0x7f00000001c0)='./config/usb_gadget/g1/functions/phonet.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/configs/c.1/phonet.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/UDC\x00', 0x40c01, 0x0) write(r0, &(0x7f0000000280)='dummy_udc.0', 0xb) write(r0, &(0x7f00000002c0)='\n', 0x1) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_connect(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010003f6fdd140402090b975f601020301090224000201005004090400f700c873b8"], 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000011c0)={r1, 0x0, 0x0}, 0x10) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000000)={@broadcast, @multicast1, 0x0, "12ceaac82ab7d944e84b6fbd6178697e3b10c9b81bede26c85ee73daab4158e8", 0x2, 0x6, 0x4, 0x4}, 0x3c) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'nq\x00', 0x28, 0xc, 0x5c}, 0x2c) syz_emit_ethernet(0x66, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60a24b9f00302b00fe8000000000000000000000000000bbfe8000000000000000000000000000aa3a020201"], 0x0) close(r0) unlinkat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1/phonet.usb0\x00', 0x0) rmdir(&(0x7f0000000340)='./config/usb_gadget/g1/functions/phonet.usb0\x00') rmdir(&(0x7f00000003c0)='./config/usb_gadget/g1\x00') 6.889836618s ago: executing program 2 (id=10): r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x34, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file1\x00', &(0x7f0000000100)=[0x1, 0xd], 0x0, 0xc5, 0x2000000000000067, 0x1}}, 0x40) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003"], 0xfc}}, 0x0) writev(r1, &(0x7f00000004c0)=[{&(0x7f0000000440)="2e9b3d0007e03dd65193dfb6c575963f8864", 0x12}, {&(0x7f0000000a80)="683f0057954e8374745129caea99bc671e", 0x11}, {&(0x7f0000000380)="a4921aaf3ffd93dad503500000e900000000000000e9470b09c30000ed19276fad635bb30b6555fbd159a08d31a240854b1f516876536365cf3487a9ebc2720e6a825d5964775eab9687bd3171e21d6247", 0x51}, {&(0x7f0000000300)="4d40b9355286784c7eebca329f52144e5bad6b9564b293a153b80f786fe324714d19fe22910428338664e3167f2c7230b1f4ff917c43fe5e0f7a03af45d2e9dcba53e20592cf507c7d91", 0x4a}], 0x4) r4 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x75, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="08000100ac1414aa08"], 0x50}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x6, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f0000000400)=0x1) r6 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)=[0x4, 0x100], &(0x7f00000001c0), 0x0, 0x2, 0x1}}, 0x40) r7 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r8 = openat$binfmt(0xffffffffffffff9c, r7, 0x42, 0x1ff) mmap(&(0x7f00001f8000/0x3000)=nil, 0x3000, 0x180000b, 0x12012, r8, 0x0) close_range(r6, r0, 0x0) r9 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r9, 0x42, 0x1ff) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r10, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) ioctl$KVM_GET_SUPPORTED_HV_CPUID_cpu(r0, 0xc008aec1, &(0x7f0000000500)={0x3, 0x0, [{0x80000019, 0x200, 0x0, 0x8001, 0x20800c53, 0x4e, 0x1ff}, {0x1, 0x3, 0x7, 0x1, 0x6, 0x5, 0xfffffffa}, {0x80000005, 0x4, 0x7, 0x7, 0x2, 0x0, 0x581}]}) clock_gettime(0x0, &(0x7f00000008c0)={0x0, 0x0}) io_getevents(0x0, 0xc0000000, 0x1, &(0x7f0000000880)=[{}], &(0x7f0000000900)={r11, r12+60000000}) 6.625374385s ago: executing program 0 (id=12): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs2/binder1\x00', 0xc02, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0xfffffffc) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000080)={0x84, @rand_addr=0x64010102, 0x15, 0x3, 'ovf\x00', 0x1, 0x4, 0x72}, 0x2c) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x10000, 0xc, 0x2}}, 0x44) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="110200000000000000000100000020000180140004d062f3a02613146d90dc0000000000000000000000ffffac1414aa060001000a000000", @ANYRESDEC, @ANYRES8], 0x34}}, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4000084}, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r8 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r8, &(0x7f0000000580)=[{&(0x7f00000003c0)="c09d4e4299b29c62e889967094", 0xd}, {0x0}, {&(0x7f0000000500)="015141046f3b87d7288a9d5b2e679bf6fae24e1bfc0c7ed7d90ff1e63fb27ae10d130cc59698a7bcd2a42684e6bcf3b7e4ff0bf07036b07735f27fa9c5082288f0d5d5a358eb4838a715b5ceeb726d4009ea7fc61b169237a145e23334c315442e3567d6", 0x64}], 0x3) r9 = socket$kcm(0x29, 0x2, 0x0) ioctl$int_in(r9, 0x5452, &(0x7f0000000240)=0x3) sendmsg$kcm(r9, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x20000818) socket(0xa, 0x2400000001, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c) 6.585406822s ago: executing program 2 (id=13): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00"/11], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x14, &(0x7f00000003c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = open(&(0x7f0000000280)='.\x00', 0x202001, 0x182) fcntl$notify(r0, 0x402, 0x8000001c) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x4000c1, 0x101) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x101100, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x9, 0x0, &(0x7f0000001540)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x1, 0xc3, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, r0, 0x8, &(0x7f0000000000)={0x5}, 0x8}, 0x94) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x58, r3, 0x1, 0x70bd2a, 0x25dfdbf9, {}, [{{0x8, 0x1, r4}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}]}, 0x58}, 0x1, 0x400000000000000, 0x0, 0x4044890}, 0x4000) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r5, 0x84, 0x17, &(0x7f0000000140)={r7, 0xe, 0x5, "8e4a96577b"}, 0xd) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r9 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r9, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'ip6gretap0\x00', 0x4}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r9, 0x0, 0x48c, &(0x7f0000000600)={0x2, 'pimreg\x00', 0x1}, 0x18) r10 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 6.131264406s ago: executing program 0 (id=14): r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x34, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file1\x00', &(0x7f0000000100)=[0x1, 0xd], 0x0, 0xc5, 0x2000000000000067, 0x1}}, 0x40) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) r4 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x75, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="08000100ac1414aa08"], 0x50}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x6, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f0000000400)=0x1) r6 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)=[0x4, 0x100], &(0x7f00000001c0), 0x0, 0x2, 0x1}}, 0x40) syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') mmap(&(0x7f00001f8000/0x3000)=nil, 0x3000, 0x180000b, 0x12012, 0xffffffffffffffff, 0x0) close_range(r6, r0, 0x0) r7 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r7, 0x42, 0x1ff) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r8, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) ioctl$KVM_GET_SUPPORTED_HV_CPUID_cpu(r0, 0xc008aec1, &(0x7f0000000500)={0x3, 0x0, [{0x80000019, 0x200, 0x0, 0x8001, 0x20800c53, 0x4e, 0x1ff}, {0x1, 0x3, 0x7, 0x1, 0x6, 0x5, 0xfffffffa}, {0x80000005, 0x4, 0x7, 0x7, 0x2, 0x0, 0x581}]}) clock_gettime(0x0, &(0x7f00000008c0)={0x0, 0x0}) io_getevents(0x0, 0xc0000000, 0x1, &(0x7f0000000880)=[{}], &(0x7f0000000900)={r9, r10+60000000}) 4.833530537s ago: executing program 1 (id=16): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00"/11], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x14, &(0x7f00000003c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = open(&(0x7f0000000280)='.\x00', 0x202001, 0x182) fcntl$notify(r0, 0x402, 0x8000001c) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x4000c1, 0x101) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x101100, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x1, 0xc3, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, r0, 0x8, &(0x7f0000000000)={0x5}, 0x8}, 0x94) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x58, r3, 0x1, 0x70bd2a, 0x25dfdbf9, {}, [{{0x8, 0x1, r4}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}]}, 0x58}, 0x1, 0x400000000000000, 0x0, 0x4044890}, 0x4000) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r5, 0x84, 0x17, &(0x7f0000000140)={r7, 0xe, 0x5, "8e4a96577b"}, 0xd) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r9 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r9, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'ip6gretap0\x00', 0x4}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r9, 0x0, 0x48c, &(0x7f0000000600)={0x2, 'pimreg\x00', 0x1}, 0x18) r10 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 4.699247497s ago: executing program 2 (id=17): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1cd) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/phonet.usb0\x00', 0x1ff) symlinkat(&(0x7f00000001c0)='./config/usb_gadget/g1/functions/phonet.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/configs/c.1/phonet.usb0\x00') write(0xffffffffffffffff, &(0x7f0000000280)='dummy_udc.0', 0xb) write(0xffffffffffffffff, &(0x7f00000002c0)='\n', 0x1) socket$packet(0x11, 0xa, 0x300) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_connect(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010003f6fdd140402090b975f601020301090224000201005004090400f700c873b8"], 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000011c0)={r0, 0x0, 0x0}, 0x10) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000000)={@broadcast, @multicast1, 0x0, "12ceaac82ab7d944e84b6fbd6178697e3b10c9b81bede26c85ee73daab4158e8", 0x2, 0x6, 0x4, 0x4}, 0x3c) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'nq\x00', 0x28, 0xc, 0x5c}, 0x2c) syz_emit_ethernet(0x66, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60a24b9f00302b00fe8000000000000000000000000000bbfe8000000000000000000000000000aa3a020201"], 0x0) close(0xffffffffffffffff) unlinkat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1/phonet.usb0\x00', 0x0) rmdir(&(0x7f0000000340)='./config/usb_gadget/g1/functions/phonet.usb0\x00') rmdir(&(0x7f00000003c0)='./config/usb_gadget/g1\x00') 4.637821094s ago: executing program 0 (id=18): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00"/11], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x14, &(0x7f00000003c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = open(&(0x7f0000000280)='.\x00', 0x202001, 0x182) fcntl$notify(r0, 0x402, 0x8000001c) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x4000c1, 0x101) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x101100, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x1, 0xc3, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, r0, 0x8, &(0x7f0000000000)={0x5}, 0x8}, 0x94) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x58, r3, 0x1, 0x70bd2a, 0x25dfdbf9, {}, [{{0x8, 0x1, r4}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}]}, 0x58}, 0x1, 0x400000000000000, 0x0, 0x4044890}, 0x4000) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r5, 0x84, 0x17, &(0x7f0000000140)={r7, 0xe, 0x5, "8e4a96577b"}, 0xd) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r9 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r9, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'ip6gretap0\x00', 0x4}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r9, 0x0, 0x48c, &(0x7f0000000600)={0x2, 'pimreg\x00', 0x1}, 0x18) r10 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 3.743776877s ago: executing program 3 (id=19): r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x34, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file1\x00', &(0x7f0000000100)=[0x1, 0xd], 0x0, 0xc5, 0x2000000000000067, 0x1}}, 0x40) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a3000"], 0xfc}}, 0x0) writev(r1, &(0x7f00000004c0)=[{&(0x7f0000000440)="2e9b3d0007e03dd65193dfb6c575963f8864", 0x12}, {&(0x7f0000000a80)="683f0057954e8374745129caea99bc671e", 0x11}, {&(0x7f0000000380)="a4921aaf3ffd93dad503500000e900000000000000e9470b09c30000ed19276fad635bb30b6555fbd159a08d31a240854b1f516876536365cf3487a9ebc2720e6a825d5964775eab9687bd3171e21d6247", 0x51}, {&(0x7f0000000300)="4d40b9355286784c7eebca329f52144e5bad6b9564b293a153b80f786fe324714d19fe22910428338664e3167f2c7230b1f4ff917c43fe5e0f7a03af45d2e9dcba53e20592cf507c7d91", 0x4a}], 0x4) r4 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x75, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="08000100ac1414aa08"], 0x50}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x6, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f0000000400)=0x1) r6 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)=[0x4, 0x100], &(0x7f00000001c0), 0x0, 0x2, 0x1}}, 0x40) r7 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r8 = openat$binfmt(0xffffffffffffff9c, r7, 0x42, 0x1ff) mmap(&(0x7f00001f8000/0x3000)=nil, 0x3000, 0x180000b, 0x12012, r8, 0x0) close_range(r6, r0, 0x0) r9 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r9, 0x42, 0x1ff) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r10, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) ioctl$KVM_GET_SUPPORTED_HV_CPUID_cpu(r0, 0xc008aec1, &(0x7f0000000500)={0x3, 0x0, [{0x80000019, 0x200, 0x0, 0x8001, 0x20800c53, 0x4e, 0x1ff}, {0x1, 0x3, 0x7, 0x1, 0x6, 0x5, 0xfffffffa}, {0x80000005, 0x4, 0x7, 0x7, 0x2, 0x0, 0x581}]}) clock_gettime(0x0, &(0x7f00000008c0)={0x0, 0x0}) io_getevents(0x0, 0xc0000000, 0x1, &(0x7f0000000880)=[{}], &(0x7f0000000900)={r11, r12+60000000}) 3.452240357s ago: executing program 1 (id=20): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYRESDEC=r2], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r4, 0xc0186405, &(0x7f0000000100)={0xb, 0x5, {0xffffffffffffffff}, {0xee01}, 0xffff}) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x143102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) shmget$private(0x0, 0x2000, 0x0, &(0x7f00000eb000/0x2000)=nil) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r8 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r9, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r10, 0x4004ae99, &(0x7f0000000280)=0x3) ioctl$KVM_INTERRUPT(r10, 0x4004ae86, &(0x7f0000000240)=0x4) 3.387328519s ago: executing program 0 (id=21): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYRESDEC=r2], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r4, 0xc0186405, &(0x7f0000000100)={0xb, 0x5, {0xffffffffffffffff}, {0xee01}, 0xffff}) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x143102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) shmget$private(0x0, 0x2000, 0x0, &(0x7f00000eb000/0x2000)=nil) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x2, 0x6, 0x3, 0x0, 0x0, {0xd}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r8 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r8], 0x6c}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r9, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r10, 0x4004ae99, &(0x7f0000000280)=0x3) ioctl$KVM_INTERRUPT(r10, 0x4004ae86, &(0x7f0000000240)=0x4) 3.279041202s ago: executing program 3 (id=22): r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x34, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file1\x00', &(0x7f0000000100)=[0x1, 0xd], 0x0, 0xc5, 0x2000000000000067, 0x1}}, 0x40) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) writev(r1, &(0x7f00000004c0)=[{&(0x7f0000000440)="2e9b3d0007e03dd65193dfb6c575963f8864", 0x12}, {&(0x7f0000000a80)="683f0057954e8374745129caea99bc671e", 0x11}, {&(0x7f0000000380)="a4921aaf3ffd93dad503500000e900000000000000e9470b09c30000ed19276fad635bb30b6555fbd159a08d31a240854b1f516876536365cf3487a9ebc2720e6a825d5964775eab9687bd3171e21d6247", 0x51}, {&(0x7f0000000300)="4d40b9355286784c7eebca329f52144e5bad6b9564b293a153b80f786fe324714d19fe22910428338664e3167f2c7230b1f4ff917c43fe5e0f7a03af45d2e9dcba53e20592cf507c7d91", 0x4a}], 0x4) r4 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x75, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="08000100ac1414aa08"], 0x50}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x6, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f0000000400)=0x1) r6 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)=[0x4, 0x100], &(0x7f00000001c0), 0x0, 0x2, 0x1}}, 0x40) syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') mmap(&(0x7f00001f8000/0x3000)=nil, 0x3000, 0x180000b, 0x12012, 0xffffffffffffffff, 0x0) close_range(r6, r0, 0x0) r7 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r7, 0x42, 0x1ff) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r8, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) ioctl$KVM_GET_SUPPORTED_HV_CPUID_cpu(r0, 0xc008aec1, &(0x7f0000000500)={0x3, 0x0, [{0x80000019, 0x200, 0x0, 0x8001, 0x20800c53, 0x4e, 0x1ff}, {0x1, 0x3, 0x7, 0x1, 0x6, 0x5, 0xfffffffa}, {0x80000005, 0x4, 0x7, 0x7, 0x2, 0x0, 0x581}]}) clock_gettime(0x0, &(0x7f00000008c0)={0x0, 0x0}) io_getevents(0x0, 0xc0000000, 0x1, &(0x7f0000000880)=[{}], &(0x7f0000000900)={r9, r10+60000000}) 3.091369491s ago: executing program 3 (id=23): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYRESDEC=r2], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r4, 0xc0186405, &(0x7f0000000100)={0xb, 0x5, {0xffffffffffffffff}, {0xee01}, 0xffff}) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x143102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) shmget$private(0x0, 0x2000, 0x0, &(0x7f00000eb000/0x2000)=nil) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, 0x2, 0x6, 0x3, 0x0, 0x0, {0xd}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r8, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r9, 0x4004ae99, &(0x7f0000000280)=0x3) ioctl$KVM_INTERRUPT(r9, 0x4004ae86, &(0x7f0000000240)=0x4) 1.884071294s ago: executing program 2 (id=24): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00"/11], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x14, &(0x7f00000003c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0xfca804a0, 0x0, 0x0, &(0x7f0000000600), 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r1 = open(&(0x7f0000000280)='.\x00', 0x202001, 0x182) fcntl$notify(r1, 0x402, 0x8000001c) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x4000c1, 0x101) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x101100, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x1, 0xc3, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, r1, 0x8, &(0x7f0000000000)={0x5}, 0x8}, 0x94) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x58, r4, 0x1, 0x70bd2a, 0x25dfdbf9, {}, [{{0x8, 0x1, r5}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}]}, 0x58}, 0x1, 0x400000000000000, 0x0, 0x4044890}, 0x4000) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f0000000140)={r8, 0xe, 0x5, "8e4a96577b"}, 0xd) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r10 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r10, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'ip6gretap0\x00', 0x4}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r10, 0x0, 0x48c, &(0x7f0000000600)={0x2, 'pimreg\x00', 0x1}, 0x18) r11 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x1) socket$nl_generic(0x10, 0x3, 0x10) 1.833587927s ago: executing program 0 (id=25): r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x34, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file1\x00', &(0x7f0000000100)=[0x1, 0xd], 0x0, 0xc5, 0x2000000000000067, 0x1}}, 0x40) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) writev(r1, 0x0, 0x0) r4 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x75, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="08000100ac1414aa08"], 0x50}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x6, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f0000000400)=0x1) r6 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)=[0x4, 0x100], &(0x7f00000001c0), 0x0, 0x2, 0x1}}, 0x40) r7 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r8 = openat$binfmt(0xffffffffffffff9c, r7, 0x42, 0x1ff) mmap(&(0x7f00001f8000/0x3000)=nil, 0x3000, 0x180000b, 0x12012, r8, 0x0) close_range(r6, r0, 0x0) r9 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r9, 0x42, 0x1ff) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r10, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) ioctl$KVM_GET_SUPPORTED_HV_CPUID_cpu(r0, 0xc008aec1, &(0x7f0000000500)={0x3, 0x0, [{0x80000019, 0x200, 0x0, 0x8001, 0x20800c53, 0x4e, 0x1ff}, {0x1, 0x3, 0x7, 0x1, 0x6, 0x5, 0xfffffffa}, {0x80000005, 0x4, 0x7, 0x7, 0x2, 0x0, 0x581}]}) clock_gettime(0x0, &(0x7f00000008c0)={0x0, 0x0}) io_getevents(0x0, 0xc0000000, 0x1, &(0x7f0000000880)=[{}], &(0x7f0000000900)={r11, r12+60000000}) 1.767655623s ago: executing program 1 (id=26): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYRESDEC=r2], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r4, 0xc0186405, &(0x7f0000000100)={0xb, 0x5, {0xffffffffffffffff}, {0xee01}, 0xffff}) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x143102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) shmget$private(0x0, 0x2000, 0x0, &(0x7f00000eb000/0x2000)=nil) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x14, 0x2, 0x6, 0x3, 0x0, 0x0, {0xd}}, 0x14}}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r8 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r9, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r10, 0x4004ae99, &(0x7f0000000280)=0x3) ioctl$KVM_INTERRUPT(r10, 0x4004ae86, &(0x7f0000000240)=0x4) 1.484690799s ago: executing program 3 (id=27): r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x34, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file1\x00', &(0x7f0000000100)=[0x1, 0xd], 0x0, 0xc5, 0x2000000000000067, 0x1}}, 0x40) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c00000016"], 0xfc}}, 0x0) writev(r1, &(0x7f00000004c0)=[{&(0x7f0000000440)="2e9b3d0007e03dd65193dfb6c575963f8864", 0x12}, {&(0x7f0000000a80)="683f0057954e8374745129caea99bc671e", 0x11}, {&(0x7f0000000380)="a4921aaf3ffd93dad503500000e900000000000000e9470b09c30000ed19276fad635bb30b6555fbd159a08d31a240854b1f516876536365cf3487a9ebc2720e6a825d5964775eab9687bd3171e21d6247", 0x51}, {&(0x7f0000000300)="4d40b9355286784c7eebca329f52144e5bad6b9564b293a153b80f786fe324714d19fe22910428338664e3167f2c7230b1f4ff917c43fe5e0f7a03af45d2e9dcba53e20592cf507c7d91", 0x4a}], 0x4) r4 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x75, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="08000100ac1414aa08"], 0x50}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x6, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f0000000400)=0x1) r6 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)=[0x4, 0x100], &(0x7f00000001c0), 0x0, 0x2, 0x1}}, 0x40) r7 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r8 = openat$binfmt(0xffffffffffffff9c, r7, 0x42, 0x1ff) mmap(&(0x7f00001f8000/0x3000)=nil, 0x3000, 0x180000b, 0x12012, r8, 0x0) close_range(r6, r0, 0x0) r9 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r9, 0x42, 0x1ff) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r10, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) ioctl$KVM_GET_SUPPORTED_HV_CPUID_cpu(r0, 0xc008aec1, &(0x7f0000000500)={0x3, 0x0, [{0x80000019, 0x200, 0x0, 0x8001, 0x20800c53, 0x4e, 0x1ff}, {0x1, 0x3, 0x7, 0x1, 0x6, 0x5, 0xfffffffa}, {0x80000005, 0x4, 0x7, 0x7, 0x2, 0x0, 0x581}]}) clock_gettime(0x0, &(0x7f00000008c0)={0x0, 0x0}) io_getevents(0x0, 0xc0000000, 0x1, &(0x7f0000000880)=[{}], &(0x7f0000000900)={r11, r12+60000000}) 635.653433ms ago: executing program 2 (id=28): r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x34, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file1\x00', &(0x7f0000000100)=[0x1, 0xd], 0x0, 0xc5, 0x2000000000000067, 0x1}}, 0x40) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) writev(r1, &(0x7f00000004c0)=[{&(0x7f0000000440)="2e9b3d0007e03dd65193dfb6c575963f8864", 0x12}, {&(0x7f0000000a80)="683f0057954e8374745129caea99bc671e", 0x11}, {&(0x7f0000000380)="a4921aaf3ffd93dad503500000e900000000000000e9470b09c30000ed19276fad635bb30b6555fbd159a08d31a240854b1f516876536365cf3487a9ebc2720e6a825d5964775eab9687bd3171e21d6247", 0x51}], 0x3) r4 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x75, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="08000100ac1414aa08"], 0x50}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x6, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f0000000400)=0x1) r6 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)=[0x4, 0x100], &(0x7f00000001c0), 0x0, 0x2, 0x1}}, 0x40) r7 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r8 = openat$binfmt(0xffffffffffffff9c, r7, 0x42, 0x1ff) mmap(&(0x7f00001f8000/0x3000)=nil, 0x3000, 0x180000b, 0x12012, r8, 0x0) close_range(r6, r0, 0x0) r9 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r9, 0x42, 0x1ff) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r10, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) ioctl$KVM_GET_SUPPORTED_HV_CPUID_cpu(r0, 0xc008aec1, &(0x7f0000000500)={0x3, 0x0, [{0x80000019, 0x200, 0x0, 0x8001, 0x20800c53, 0x4e, 0x1ff}, {0x1, 0x3, 0x7, 0x1, 0x6, 0x5, 0xfffffffa}, {0x80000005, 0x4, 0x7, 0x7, 0x2, 0x0, 0x581}]}) clock_gettime(0x0, &(0x7f00000008c0)={0x0, 0x0}) io_getevents(0x0, 0xc0000000, 0x1, &(0x7f0000000880)=[{}], &(0x7f0000000900)={r11, r12+60000000}) 545.938894ms ago: executing program 0 (id=29): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/phonet.usb0\x00', 0x1ff) symlinkat(&(0x7f00000001c0)='./config/usb_gadget/g1/functions/phonet.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/configs/c.1/phonet.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/UDC\x00', 0x40c01, 0x0) write(r0, &(0x7f0000000280)='dummy_udc.0', 0xb) write(r0, &(0x7f00000002c0)='\n', 0x1) socket$packet(0x11, 0xa, 0x300) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_connect(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010003f6fdd140402090b975f601020301090224000201005004090400f700c873b8"], 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000011c0)={r1, 0x0, 0x0}, 0x10) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000000)={@broadcast, @multicast1, 0x0, "12ceaac82ab7d944e84b6fbd6178697e3b10c9b81bede26c85ee73daab4158e8", 0x2, 0x6, 0x4, 0x4}, 0x3c) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'nq\x00', 0x28, 0xc, 0x5c}, 0x2c) syz_emit_ethernet(0x66, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60a24b9f00302b00fe8000000000000000000000000000bbfe8000000000000000000000000000aa3a020201"], 0x0) close(r0) unlinkat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1/phonet.usb0\x00', 0x0) rmdir(&(0x7f0000000340)='./config/usb_gadget/g1/functions/phonet.usb0\x00') rmdir(&(0x7f00000003c0)='./config/usb_gadget/g1\x00') 482.094232ms ago: executing program 1 (id=30): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1cd) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) symlinkat(&(0x7f00000001c0)='./config/usb_gadget/g1/functions/phonet.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/configs/c.1/phonet.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/UDC\x00', 0x40c01, 0x0) write(r0, &(0x7f0000000280)='dummy_', 0x6) write(r0, &(0x7f00000002c0)='\n', 0x1) socket$packet(0x11, 0xa, 0x300) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1/phonet.usb0\x00', 0x0) rmdir(&(0x7f00000003c0)='./config/usb_gadget/g1\x00') 417.365855ms ago: executing program 1 (id=31): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00"/11], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x14, &(0x7f00000003c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0xfca804a0, 0x0, 0x0, &(0x7f0000000600), 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r1 = open(&(0x7f0000000280)='.\x00', 0x202001, 0x182) fcntl$notify(r1, 0x402, 0x8000001c) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x4000c1, 0x101) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x101100, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x1, 0xc3, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, r1, 0x8, &(0x7f0000000000)={0x5}, 0x8}, 0x94) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x58, r4, 0x1, 0x70bd2a, 0x25dfdbf9, {}, [{{0x8, 0x1, r5}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}]}, 0x58}, 0x1, 0x400000000000000, 0x0, 0x4044890}, 0x4000) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f0000000140)={r8, 0xe, 0x5, "8e4a96577b"}, 0xd) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r10 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r10, 0x0, 0x48c, &(0x7f0000000600)={0x2, 'pimreg\x00', 0x1}, 0x18) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 287.699565ms ago: executing program 3 (id=32): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1cd) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) symlinkat(&(0x7f00000001c0)='./config/usb_gadget/g1/functions/phonet.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/configs/c.1/phonet.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/UDC\x00', 0x40c01, 0x0) write(r0, &(0x7f0000000280)='dummy_', 0x6) write(r0, &(0x7f00000002c0)='\n', 0x1) socket$packet(0x11, 0xa, 0x300) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1/phonet.usb0\x00', 0x0) rmdir(&(0x7f00000003c0)='./config/usb_gadget/g1\x00') 162.75351ms ago: executing program 2 (id=33): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00"/11], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x14, &(0x7f00000003c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0xfca804a0, 0x0, 0x0, &(0x7f0000000600), 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r1 = open(&(0x7f0000000280)='.\x00', 0x202001, 0x182) fcntl$notify(r1, 0x402, 0x8000001c) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x4000c1, 0x101) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x101100, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x1, 0xc3, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, r1, 0x8, &(0x7f0000000000)={0x5}, 0x8}, 0x94) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x58, r4, 0x1, 0x70bd2a, 0x25dfdbf9, {}, [{{0x8, 0x1, r5}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}]}, 0x58}, 0x1, 0x400000000000000, 0x0, 0x4044890}, 0x4000) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f0000000140)={r8, 0xe, 0x5, "8e4a96577b"}, 0xd) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'ip6gretap0\x00', 0x4}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000600)={0x2, 'pimreg\x00', 0x1}, 0x18) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 0s ago: executing program 3 (id=34): syz_open_dev$sndpcmc(&(0x7f00000000c0), 0x7, 0x96603) r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYRESOCT, @ANYRESDEC=r0, @ANYRES8=r0], 0x7c}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r1) sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x4000000) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="000a30000000090a0108000000000000000000061400128010000180090001007866724d00000000080007400000003714000000000000020500000aa616dc6b6c7edc3dd07a972891ead645c6e5fac48dfaadea0000"], 0x58}, 0x1, 0x0, 0x0, 0x20040800}, 0xc040) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) openat$vcs(0xffffff9c, &(0x7f0000000180), 0x50040, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) getsockname$packet(r2, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) sched_setscheduler(0x0, 0x1, 0x0) keyctl$set_reqkey_keyring(0xe, 0x5) request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)='q\xa9', 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0601, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$nl_rdma(0x10, 0x3, 0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000200001032abd7000ffd9df2502000000ff000008"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x4040) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073797a3100000000080041007369770014003300626f6e64300000000000009400000000"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r6, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) 0s ago: executing program 2 (id=35): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1cd) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) symlinkat(&(0x7f00000001c0)='./config/usb_gadget/g1/functions/phonet.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/configs/c.1/phonet.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/UDC\x00', 0x40c01, 0x0) write(r0, &(0x7f0000000280)='dummy_udc.0', 0xb) write(r0, &(0x7f00000002c0)='\n', 0x1) socket$packet(0x11, 0xa, 0x300) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1/phonet.usb0\x00', 0x0) rmdir(&(0x7f00000003c0)='./config/usb_gadget/g1\x00') kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:9985' (ED25519) to the list of known hosts. [ 42.168888][ T5714] cgroup: Unknown subsys name 'net' [ 42.350722][ T5714] cgroup: Unknown subsys name 'cpuset' [ 42.355367][ T5714] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 43.241638][ T5714] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 47.092132][ T5755] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 47.095983][ T5756] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 47.096171][ T5755] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 47.099814][ T5758] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 47.102151][ T5755] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 47.103818][ T5759] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 47.106161][ T5759] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 47.106327][ T5758] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 47.107193][ T5755] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 47.107816][ T5758] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 47.108631][ T5758] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 47.109499][ T5759] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 47.110150][ T5759] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 47.110474][ T5759] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 47.111827][ T5755] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 47.117353][ T5758] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 47.120897][ T5755] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 47.121897][ T5746] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 47.122530][ T5758] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 47.130465][ T5103] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 47.753939][ T5751] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.758232][ T5751] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.762608][ T5751] bridge_slave_0: entered allmulticast mode [ 47.768404][ T5751] bridge_slave_0: entered promiscuous mode [ 47.799776][ T5753] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.802328][ T5753] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.805022][ T5753] bridge_slave_0: entered allmulticast mode [ 47.809469][ T5753] bridge_slave_0: entered promiscuous mode [ 47.812946][ T5751] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.816768][ T5751] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.819596][ T5751] bridge_slave_1: entered allmulticast mode [ 47.822848][ T5751] bridge_slave_1: entered promiscuous mode [ 47.839699][ T5753] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.842292][ T5753] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.845061][ T5753] bridge_slave_1: entered allmulticast mode [ 47.849622][ T5753] bridge_slave_1: entered promiscuous mode [ 47.899749][ T5751] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.904803][ T5751] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.913706][ T5742] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.916360][ T5742] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.919067][ T5742] bridge_slave_0: entered allmulticast mode [ 47.922544][ T5742] bridge_slave_0: entered promiscuous mode [ 47.927103][ T5742] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.929680][ T5742] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.931935][ T5742] bridge_slave_1: entered allmulticast mode [ 47.934551][ T5742] bridge_slave_1: entered promiscuous mode [ 47.939107][ T5753] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.947589][ T5753] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.990033][ T5751] team0: Port device team_slave_0 added [ 47.991990][ T5743] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.994766][ T5743] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.997201][ T5743] bridge_slave_0: entered allmulticast mode [ 47.999912][ T5743] bridge_slave_0: entered promiscuous mode [ 48.003468][ T5743] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.005815][ T5743] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.008173][ T5743] bridge_slave_1: entered allmulticast mode [ 48.010754][ T5743] bridge_slave_1: entered promiscuous mode [ 48.021985][ T5753] team0: Port device team_slave_0 added [ 48.024792][ T5751] team0: Port device team_slave_1 added [ 48.042919][ T5742] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.048748][ T5753] team0: Port device team_slave_1 added [ 48.068967][ T5743] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.082147][ T5751] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.085044][ T5751] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.093392][ T5751] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.099841][ T5742] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.116259][ T5743] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.121017][ T5751] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.124204][ T5751] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.134369][ T5751] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.148983][ T5753] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.151971][ T5753] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.162402][ T5753] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.177834][ T5753] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.180725][ T5753] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.191314][ T5753] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.202815][ T5742] team0: Port device team_slave_0 added [ 48.207301][ T5742] team0: Port device team_slave_1 added [ 48.225474][ T5743] team0: Port device team_slave_0 added [ 48.237839][ T5743] team0: Port device team_slave_1 added [ 48.276642][ T5751] hsr_slave_0: entered promiscuous mode [ 48.279853][ T5751] hsr_slave_1: entered promiscuous mode [ 48.290960][ T5742] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.293230][ T5742] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.301362][ T5742] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.318581][ T5743] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.321331][ T5743] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.329295][ T5743] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.333266][ T5742] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.335535][ T5742] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.345758][ T5742] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.352908][ T5753] hsr_slave_0: entered promiscuous mode [ 48.355188][ T5753] hsr_slave_1: entered promiscuous mode [ 48.357399][ T5753] debugfs: 'hsr0' already exists in 'hsr' [ 48.359248][ T5753] Cannot create hsr debugfs directory [ 48.361339][ T5743] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.363943][ T5743] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.371921][ T5743] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.423229][ T5742] hsr_slave_0: entered promiscuous mode [ 48.425462][ T5742] hsr_slave_1: entered promiscuous mode [ 48.427927][ T5742] debugfs: 'hsr0' already exists in 'hsr' [ 48.430570][ T5742] Cannot create hsr debugfs directory [ 48.480612][ T5743] hsr_slave_0: entered promiscuous mode [ 48.482930][ T5743] hsr_slave_1: entered promiscuous mode [ 48.484984][ T5743] debugfs: 'hsr0' already exists in 'hsr' [ 48.486816][ T5743] Cannot create hsr debugfs directory [ 48.768216][ T5751] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 48.778224][ T5751] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.781024][ T5751] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 48.786315][ T5751] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.790168][ T5751] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 48.794712][ T5751] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.797604][ T5751] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 48.801689][ T5751] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.847211][ T5753] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 48.851405][ T5753] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.855076][ T5753] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 48.862337][ T5753] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.865400][ T5753] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 48.869545][ T5753] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.872607][ T5753] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 48.878381][ T5753] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.932914][ T5742] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 48.938240][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.941406][ T5742] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 48.945500][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.949767][ T5742] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 48.953836][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.956560][ T5742] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 48.960896][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.021378][ T5743] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 49.025634][ T5743] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.030892][ T5751] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.037437][ T5743] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 49.041271][ T5743] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.045354][ T5743] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 49.050299][ T5743] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.060961][ T5743] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 49.068789][ T5743] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.073785][ T5751] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.097561][ T170] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.100110][ T170] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.112153][ T170] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.115172][ T170] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.128175][ T5103] Bluetooth: hci2: command tx timeout [ 49.172767][ T5753] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.197291][ T5103] Bluetooth: hci0: command tx timeout [ 49.198153][ T5750] Bluetooth: hci1: command tx timeout [ 49.199681][ T5103] Bluetooth: hci3: command tx timeout [ 49.234287][ T5753] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.251368][ T234] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.254641][ T234] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.266693][ T5742] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.290259][ T234] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.293317][ T234] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.316281][ T5742] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.320414][ T5743] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.336183][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.339152][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.349509][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.351868][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.375327][ T5743] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.386597][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.388953][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.402106][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.404420][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state qemu-system-x86_64: ahci: PRDT length for NCQ command (0x0) is smaller than the requested size (0x1f6000) [ 49.576473][ T5751] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.615287][ T5751] veth0_vlan: entered promiscuous mode [ 49.624724][ T5751] veth1_vlan: entered promiscuous mode [ 49.635104][ T5753] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.661636][ T5751] veth0_macvtap: entered promiscuous mode [ 49.680157][ T5751] veth1_macvtap: entered promiscuous mode [ 49.690733][ T5743] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.703787][ T5753] veth0_vlan: entered promiscuous mode [ 49.710614][ T5742] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.715696][ T5751] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.723256][ T5751] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.734036][ T5753] veth1_vlan: entered promiscuous mode [ 49.776284][ T5743] veth0_vlan: entered promiscuous mode [ 49.786617][ T5753] veth0_macvtap: entered promiscuous mode [ 49.797879][ T5753] veth1_macvtap: entered promiscuous mode [ 49.802275][ T5743] veth1_vlan: entered promiscuous mode [ 49.823819][ T5742] veth0_vlan: entered promiscuous mode [ 49.832402][ T5753] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.838414][ T1133] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 49.840604][ T1133] ata1: failed to read log page 10h (errno=-5) [ 49.842524][ T1133] ata1.00: exception Emask 0x1 SAct 0x800 SErr 0x0 action 0x0 [ 49.843248][ T170] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.844821][ T1133] ata1.00: irq_stat 0x41000000 [ 49.844836][ T1133] ata1.00: failed command: READ FPDMA QUEUED [ 49.844843][ T1133] ata1.00: cmd 60/b0:58:5e:89:03/0f:00:00:00:00/40 tag 11 ncq dma 2056192 in [ 49.844843][ T1133] res 50/04:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 49.844873][ T1133] ata1.00: status: { DRDY } [ 49.844881][ T1133] ata1.00: error: { ABRT } [ 49.846219][ T1133] ata1.00: configured for UDMA/100 [ 49.848728][ T170] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.853000][ T5742] veth1_vlan: entered promiscuous mode [ 49.858936][ T1133] sd 0:0:0:0: [sda] tag#11 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 49.861446][ T5753] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.862763][ T1133] sd 0:0:0:0: [sda] tag#11 Sense Key : Aborted Command [current] [ 49.870260][ T5822] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.873402][ T1133] sd 0:0:0:0: [sda] tag#11 Add. Sense: No additional sense information [ 49.881866][ T1133] sd 0:0:0:0: [sda] tag#11 CDB: Read(10) 28 00 00 03 89 5e 00 0f b0 00 [ 49.884908][ T1133] I/O error, dev sda, sector 231774 op 0x0:(READ) flags 0x80700 phys_seg 33 prio class 2 [ 49.888929][ T1133] ata1: EH complete [ 49.891634][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.896495][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.899671][ T5743] veth0_macvtap: entered promiscuous mode [ 49.913039][ T5743] veth1_macvtap: entered promiscuous mode [ 49.951759][ T5742] veth0_macvtap: entered promiscuous mode qemu-system-x86_64: ahci: PRDT length for NCQ command (0x0) is smaller than the requested size (0x17b000) [ 49.961947][ T5751] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 49.962957][ T5742] veth1_macvtap: entered promiscuous mode [ 49.975551][ T5743] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.983751][ T5751] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 49.991916][ T5743] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.992654][ T5751] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 49.998792][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.002215][ T5751] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 50.003062][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.019826][ T5751] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 50.040645][ T5742] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.060292][ T5742] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.065196][ T234] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.069750][ T234] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.105896][ T1133] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 50.113075][ T1133] ata1: failed to read log page 10h (errno=-5) [ 50.115797][ T1133] ata1.00: exception Emask 0x1 SAct 0x800 SErr 0x0 action 0x0 [ 50.119137][ T1133] ata1.00: irq_stat 0x41000000 [ 50.123195][ T1133] ata1.00: failed command: READ FPDMA QUEUED [ 50.125821][ T1133] ata1.00: cmd 60/d8:58:0e:99:03/0b:00:00:00:00/40 tag 11 ncq dma 1552384 in [ 50.125821][ T1133] res 50/04:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 50.134978][ T1133] ata1.00: status: { DRDY } [ 50.136939][ T1133] ata1.00: error: { ABRT } [ 50.139148][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.147204][ T5823] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.148572][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.155945][ T1133] ata1.00: configured for UDMA/100 [ 50.165041][ T1133] sd 0:0:0:0: [sda] tag#11 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 50.173442][ T1133] sd 0:0:0:0: [sda] tag#11 Sense Key : Aborted Command [current] [ 50.181954][ T1133] sd 0:0:0:0: [sda] tag#11 Add. Sense: No additional sense information [ 50.187436][ T1179] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.188394][ T1133] sd 0:0:0:0: [sda] tag#11 CDB: Read(10) 28 00 00 03 99 0e 00 0b d8 00 [ 50.193387][ T1133] I/O error, dev sda, sector 235790 op 0x0:(READ) flags 0x80700 phys_seg 25 prio class 2 [ 50.195392][ T1179] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.198974][ T1133] ata1: EH complete [ 50.218675][ T234] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.221841][ T234] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.246249][ T1179] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.250801][ T1179] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.257083][ T5822] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.262116][ T5822] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.265505][ T5822] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.271471][ T5822] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.274891][ T5822] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.279349][ T5822] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.282134][ T5822] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.297928][ T5822] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.301800][ T5822] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.365219][ T5904] syz.0.5 uses obsolete (PF_INET,SOCK_PACKET) [ 50.373994][ T5904] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5'. [ 50.389120][ T5906] configfs-gadget.g1 gadget.0: USB CDC Phonet function [ 50.392078][ T5906] configfs-gadget.g1 gadget.0: using dummy_udc, OUT ep2out-bulk, IN ep1in-bulk [ 50.399065][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.417131][ T5822] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.424139][ T5822] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.434118][ T5909] configfs-gadget.g1 gadget.0: USB CDC Phonet function [ 50.438632][ T5909] configfs-gadget.g1 gadget.0: using dummy_udc, OUT ep2out-bulk, IN ep1in-bulk [ 50.474862][ T5912] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7'. [ 50.478660][ T5823] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.482080][ T5823] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.668111][ T10] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 50.716025][ T5921] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10'. [ 50.722790][ T5921] netlink: 44 bytes leftover after parsing attributes in process `syz.2.10'. [ 50.854990][ T5925] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 50.862176][ T5924] IPVS: stopping backup sync thread 5925 ... [ 50.921219][ T5906] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 50.928280][ T1042] IPVS: starting estimator thread 0... [ 50.946169][ T29] IPVS: starting estimator thread 0... [ 51.054519][ T5927] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12'. [ 51.062211][ T5929] IPVS: using max 43 ests per chain, 103200 per kthread [ 51.074798][ T5927] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12'. [ 51.088638][ T5931] IPVS: using max 43 ests per chain, 103200 per kthread [ 51.120569][ T5934] IPVS: stopping backup sync thread 5935 ... [ 51.198479][ T5103] Bluetooth: hci2: command tx timeout [ 51.277874][ T5103] Bluetooth: hci3: command tx timeout [ 51.287471][ T5103] Bluetooth: hci0: command tx timeout [ 51.291392][ T5103] Bluetooth: hci1: command tx timeout [ 51.880985][ T5940] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14'. [ 52.141327][ T10] usb 6-1: unable to get BOS descriptor or descriptor too short [ 52.143636][ T5943] ref_ctr_offset mismatch. inode: 0x29 offset: 0x4 ref_ctr_offset(old): 0xaa1414ac00010008 ref_ctr_offset(new): 0x0 [ 52.794215][ T10] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 52.797040][ T10] usb 6-1: can't read configurations, error -71 [ 52.873348][ T5955] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 52.877351][ T5950] IPVS: stopping backup sync thread 5955 ... [ 53.087182][ T5945] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 53.209691][ T5961] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 53.213214][ T5960] IPVS: stopping backup sync thread 5961 ... [ 53.278086][ T5750] Bluetooth: hci2: command tx timeout [ 53.357324][ T5103] Bluetooth: hci0: command tx timeout [ 53.357387][ T5755] Bluetooth: hci3: command tx timeout [ 53.359760][ T5750] Bluetooth: hci1: command tx timeout [ 53.620249][ T5953] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 53.627642][ T5744] IPVS: starting estimator thread 0... [ 53.730222][ T5963] IPVS: using max 43 ests per chain, 103200 per kthread [ 53.814444][ T5945] usb 7-1: unable to get BOS descriptor or descriptor too short [ 54.115042][ T5965] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19'. [ 54.118792][ T5965] netlink: 60 bytes leftover after parsing attributes in process `syz.3.19'. [ 54.155309][ T5945] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 54.158174][ T5945] usb 7-1: can't read configurations, error -71 [ 54.266355][ T5971] Zero length message leads to an empty skb [ 54.274336][ T5971] netlink: 20 bytes leftover after parsing attributes in process `syz.1.20'. [ 55.359877][ T5755] Bluetooth: hci2: command tx timeout [ 55.443178][ T5103] Bluetooth: hci3: command tx timeout [ 55.445144][ T5750] Bluetooth: hci0: command tx timeout [ 55.446944][ T5755] Bluetooth: hci1: command tx timeout [ 55.534706][ T5748] udevd[5748]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 55.832072][ T5989] __nla_validate_parse: 1 callbacks suppressed [ 55.832090][ T5989] netlink: 8 bytes leftover after parsing attributes in process `syz.0.25'. [ 55.839650][ T5990] IPVS: stopping backup sync thread 5993 ... [ 55.936074][ T5994] netlink: 20 bytes leftover after parsing attributes in process `syz.1.26'. [ 56.918131][ T5897] udevd[5897]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 56.943815][ T6002] netlink: 8 bytes leftover after parsing attributes in process `syz.3.27'. [ 56.959764][ T5749] udevd[5749]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 57.073012][ T6009] configfs-gadget.g1 gadget.0: USB CDC Phonet function [ 57.083653][ T6009] configfs-gadget.g1 gadget.0: using dummy_udc, OUT ep2out-bulk, IN ep1in-bulk [ 57.115649][ T6010] netlink: 8 bytes leftover after parsing attributes in process `syz.2.28'. [ 57.118509][ T6012] UDC core: g1: couldn't find an available UDC or it's busy [ 57.340999][ T6019] UDC core: g1: couldn't find an available UDC or it's busy [ 57.507164][ T34] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 57.810221][ T6009] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 58.586844][ T6035] ------------[ cut here ]------------ [ 58.589903][ T6035] refcount_t: addition on 0; use-after-free. [ 58.592321][ T6035] WARNING: lib/refcount.c:25 at refcount_warn_saturate+0x111/0x130, CPU#1: syz.2.35/6035 [ 58.596120][ T6035] Modules linked in: [ 58.598333][ T6035] CPU: 1 UID: 0 PID: 6035 Comm: syz.2.35 Not tainted syzkaller #0 PREEMPT(full) [ 58.602113][ T6035] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 58.605875][ T6035] RIP: 0010:refcount_warn_saturate+0x111/0x130 [ 58.608370][ T6035] Code: cc e8 43 e6 ed fc 48 8d 3d dc 0f 12 0c 67 48 0f b9 3a e8 32 e6 ed fc 5b 5d e9 0b 8b a0 06 e8 26 e6 ed fc 48 8d 3d cf 0f 12 0c <67> 48 0f b9 3a e8 15 e6 ed fc 5b 5d c3 cc cc cc cc 48 89 df e8 c6 [ 58.615700][ T6035] RSP: 0018:ffffc9000784fc78 EFLAGS: 00010283 [ 58.618194][ T6035] RAX: 0000000000000f20 RBX: ffff888024bd0d1c RCX: ffffc90006e49000 [ 58.621279][ T6035] RDX: 0000000000080000 RSI: ffffffff851bc7da RDI: ffffffff912dd7b0 [ 58.624360][ T6035] RBP: 0000000000000002 R08: 0000000000000005 R09: 0000000000000004 [ 58.627427][ T6035] R10: 0000000000000002 R11: 0000000000000000 R12: ffff888024bd0d1c [ 58.630506][ T6035] R13: ffff8880130d13d8 R14: ffffc9000784fd28 R15: ffff88806c9a8000 [ 58.633568][ T6035] FS: 0000000000000000(0000) GS:ffff888096cdf000(0063) knlGS:00000000f546db40 [ 58.637113][ T6035] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 58.639710][ T6035] CR2: 0000000033e1effc CR3: 000000006e2fa000 CR4: 0000000000352ef0 [ 58.642770][ T6035] Call Trace: [ 58.644027][ T6035] [ 58.645156][ T6035] config_item_get+0x8c/0xb0 [ 58.647040][ T6035] configfs_symlink+0x390/0x11f0 [ 58.649001][ T6035] ? bpf_lsm_inode_permission+0x9/0x10 [ 58.651090][ T6035] ? security_inode_permission+0xbf/0x250 [ 58.652862][ T6035] ? __pfx_configfs_symlink+0x10/0x10 [ 58.654573][ T6035] vfs_symlink+0x178/0x4d0 [ 58.655991][ T6035] filename_symlinkat+0x2a6/0x560 [ 58.657838][ T6035] ? __pfx_filename_symlinkat+0x10/0x10 [ 58.659574][ T6035] ? strncpy_from_user+0x19d/0x2d0 [ 58.661383][ T6035] ? do_getname+0x191/0x390 [ 58.662828][ T6035] __ia32_sys_symlinkat+0x9b/0xe0 [ 58.664411][ T6035] __do_fast_syscall_32+0xe7/0x970 [ 58.666033][ T6035] do_fast_syscall_32+0x32/0x70 [ 58.667997][ T6035] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 58.670464][ T6035] RIP: 0023:0xf707efec [ 58.672093][ T6035] Code: Unable to access opcode bytes at 0xf707efc2. [ 58.674663][ T6035] RSP: 002b:00000000f546d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000130 [ 58.678272][ T6035] RAX: ffffffffffffffda RBX: 00000000800001c0 RCX: 00000000ffffff9c [ 58.681036][ T6035] RDX: 0000000080000200 RSI: 0000000000000000 RDI: 0000000000000000 [ 58.683510][ T6035] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 58.685987][ T6035] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 58.688614][ T6035] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 58.691045][ T6035] [ 58.692033][ T6035] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 58.694302][ T6035] CPU: 1 UID: 0 PID: 6035 Comm: syz.2.35 Not tainted syzkaller #0 PREEMPT(full) [ 58.697112][ T6035] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 58.700249][ T6035] Call Trace: [ 58.701319][ T6035] [ 58.702266][ T6035] dump_stack_lvl+0x100/0x190 [ 58.703742][ T6035] vpanic+0x552/0x970 [ 58.705002][ T6035] ? __pfx_vpanic+0x10/0x10 [ 58.706446][ T6035] panic+0xd1/0xe0 [ 58.707644][ T6035] ? __pfx_panic+0x10/0x10 [ 58.710066][ T6035] check_panic_on_warn.cold+0x19/0x34 [ 58.712010][ T6035] ? refcount_warn_saturate+0x111/0x130 [ 58.713749][ T6035] __warn.cold+0x191/0x318 [ 58.715153][ T6035] __report_bug+0x30f/0x440 [ 58.716584][ T6035] ? refcount_warn_saturate+0x111/0x130 [ 58.718320][ T6035] ? __pfx___report_bug+0x10/0x10 [ 58.719909][ T6035] ? refcount_warn_saturate+0x10a/0x130 [ 58.721650][ T6035] report_bug_entry+0xe1/0x290 [ 58.723162][ T6035] ? refcount_warn_saturate+0x111/0x130 [ 58.724893][ T6035] handle_bug+0x1cd/0x2a0 [ 58.726279][ T6035] exc_invalid_op+0x17/0x50 [ 58.727742][ T6035] asm_exc_invalid_op+0x1a/0x20 [ 58.729281][ T6035] RIP: 0010:refcount_warn_saturate+0x111/0x130 [ 58.731404][ T6035] Code: cc e8 43 e6 ed fc 48 8d 3d dc 0f 12 0c 67 48 0f b9 3a e8 32 e6 ed fc 5b 5d e9 0b 8b a0 06 e8 26 e6 ed fc 48 8d 3d cf 0f 12 0c <67> 48 0f b9 3a e8 15 e6 ed fc 5b 5d c3 cc cc cc cc 48 89 df e8 c6 [ 58.737429][ T6035] RSP: 0018:ffffc9000784fc78 EFLAGS: 00010283 [ 58.739333][ T6035] RAX: 0000000000000f20 RBX: ffff888024bd0d1c RCX: ffffc90006e49000 [ 58.741815][ T6035] RDX: 0000000000080000 RSI: ffffffff851bc7da RDI: ffffffff912dd7b0 [ 58.744273][ T6035] RBP: 0000000000000002 R08: 0000000000000005 R09: 0000000000000004 [ 58.746729][ T6035] R10: 0000000000000002 R11: 0000000000000000 R12: ffff888024bd0d1c [ 58.749191][ T6035] R13: ffff8880130d13d8 R14: ffffc9000784fd28 R15: ffff88806c9a8000 [ 58.751662][ T6035] ? refcount_warn_saturate+0x10a/0x130 [ 58.753406][ T6035] ? refcount_warn_saturate+0x10a/0x130 [ 58.755169][ T6035] config_item_get+0x8c/0xb0 [ 58.756631][ T6035] configfs_symlink+0x390/0x11f0 [ 58.758213][ T6035] ? bpf_lsm_inode_permission+0x9/0x10 [ 58.759925][ T6035] ? security_inode_permission+0xbf/0x250 [ 58.761724][ T6035] ? __pfx_configfs_symlink+0x10/0x10 [ 58.763404][ T6035] vfs_symlink+0x178/0x4d0 [ 58.764807][ T6035] filename_symlinkat+0x2a6/0x560 [ 58.766392][ T6035] ? __pfx_filename_symlinkat+0x10/0x10 [ 58.768157][ T6035] ? strncpy_from_user+0x19d/0x2d0 [ 58.769768][ T6035] ? do_getname+0x191/0x390 [ 58.771218][ T6035] __ia32_sys_symlinkat+0x9b/0xe0 [ 58.772792][ T6035] __do_fast_syscall_32+0xe7/0x970 [ 58.774408][ T6035] do_fast_syscall_32+0x32/0x70 [ 58.775933][ T6035] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 58.777928][ T6035] RIP: 0023:0xf707efec [ 58.779220][ T6035] Code: Unable to access opcode bytes at 0xf707efc2. [ 58.781295][ T6035] RSP: 002b:00000000f546d50c EFLAGS: 00000292 ORIG_RAX: 0000000000000130 [ 58.783877][ T6035] RAX: ffffffffffffffda RBX: 00000000800001c0 RCX: 00000000ffffff9c [ 58.786826][ T6035] RDX: 0000000080000200 RSI: 0000000000000000 RDI: 0000000000000000 [ 58.789574][ T6035] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 58.792651][ T6035] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000 [ 58.795673][ T6035] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 58.798464][ T6035] [ 58.799981][ T6035] Kernel Offset: disabled [ 58.801357][ T6035] Rebooting in 86400 seconds..