last executing test programs: 15.276442648s ago: executing program 2 (id=24): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-avx\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0xbfa8be5ef523b773, 0x70bd25, 0x25dfdbfd}, 0xfffffe7f}, 0x1, 0x0, 0x0, 0xc010}, 0x20000880) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x28, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000080)=@framed={{}, [@jmp={0x5, 0x0, 0xe, 0x0, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @jmp, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x90) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000080)}], 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x439, 0x70fd2c, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x3, 0x610c3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @dev}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0xfe00}]}}}]}, 0x40}}, 0x0) 13.93385163s ago: executing program 1 (id=28): fanotify_mark(0xffffffffffffffff, 0x105, 0x5000003a, 0xffffffffffffffff, 0x0) creat(0x0, 0x10) mknod(0x0, 0x8001420, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r3, 0x0) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r4}, 0x8) getdents64(r4, &(0x7f0000002f40)=""/4098, 0x1002) 12.928557724s ago: executing program 2 (id=31): socket$inet(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r3, 0x0, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$SIOCGSTAMPNS(r4, 0x8907, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000100)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00\'$', 0x30, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @mcast2, {[], @dest_unreach={0x1, 0x4, 0x0, 0x0, '\x00', {0xd, 0x6, "2318d3", 0x0, 0x0, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1}}}}}}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x2, 0x40802) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r5, 0xc10c5541, &(0x7f0000000180)={0x6, 0x7ff}) 11.649241837s ago: executing program 2 (id=34): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route_sched(r0, 0x0, 0x40) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x10031, 0xffffffffffffffff, 0x65be1000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000080)={0x0, 0x304000, 0x800, 0x0, 0x3}, 0x1c) r6 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) getsockopt$XDP_MMAP_OFFSETS(0xffffffffffffffff, 0x11b, 0x1, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) ioctl$KVM_GET_VCPU_EVENTS(r7, 0x4048aecb, &(0x7f00000003c0)) 9.634575984s ago: executing program 4 (id=36): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/crypto\x00', 0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x5, 0x7, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x3, 0xd}, 0x50) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x40, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_LABELS_MASK={0x4}, @CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_LABELS={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendfile(r1, r0, &(0x7f0000000000)=0x9, 0x80000000000006) 7.594722477s ago: executing program 4 (id=39): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="0213020902000000", 0x8}, {&(0x7f0000000780)}], 0x2}, 0x400c010) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r2, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)}, 0x4008804) sendmsg$inet(r2, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, 0x0}, 0x0) bpf$OBJ_GET_PROG(0x9, &(0x7f0000000100)=@generic={0x0, 0x2e}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x50, 0x30, 0xffff, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_police={0x38, 0x1, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [[@TCA_POLICE_AVRATE={0x8, 0x4, 0x9}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x1f4}}}}]}]}, 0x50}}, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x200, 0x0) mount(&(0x7f0000000400)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000440)='erofs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@verity_on}]}) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') readv(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000001640)=""/4097, 0x693d4f623b09dbf1}], 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0100000003000000a00300000d"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0xffffffffffffffff, 0x0, &(0x7f00000003c0)="2e5586a1d217b7cad514458fcbde8f", &(0x7f0000000280), 0x17fc, r4}, 0x38) sendmsg$nl_route(r3, 0x0, 0x11) 6.774703957s ago: executing program 4 (id=42): mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 6.703597057s ago: executing program 1 (id=43): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000000240)=ANY=[@ANYBLOB="240100001600010428bd700000000000fe8000000000000000000000000000bbfc01000000000000000000000000000100040000000000000000a00000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff02000000000000000000000000000100000000330000000a0101010000000000000000000000000000000000004e340100000000000000000000000000000004000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000a0000002bbd70000000000000000200000000000000000008000020ffffffdf2c0027cc"], 0x124}}, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300030f000000000700000000000005000900e000000001d78771b90bd8a3b4914783c58777003d5b9538a9dc7e9513fdac550000000003000600000000000200000000000000000000000000000002000100000000000000021600000000030005000000000002"], 0x78}, 0x1, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000001080)='dctcp\x00', 0x6) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={0xffffffffffffffff, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000140)={0x0, 0x0}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x24040ffd, &(0x7f0000000440)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r5, &(0x7f0000001000)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000000)="b4b1fa4d428ab6b0360210bd0d99c4db69ba1a947c3a8a1c8ef01c743f175f6845fe69edde868e8f0ea0d693fe9b0a84fcf26bfc3b", 0x35}], 0x1}}], 0x1, 0x0) sendto$inet(r5, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x182, 0x0, 0x27) 6.664187044s ago: executing program 4 (id=44): sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xbf}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x40) r0 = socket(0xa, 0x3, 0x2) sendmmsg(r0, &(0x7f0000001e00)=[{{&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x362, @loopback, 0x5}, 0x80, 0x0}}, {{&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x2, @rand_addr=' \x01\x00', 0x6, 0x4}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x10, 0x29, 0x4}], 0x10}}], 0x2, 0x20004080) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setitimer(0x0, 0x0, &(0x7f0000000200)) r2 = syz_open_dev$vbi(&(0x7f0000000240), 0x2, 0x2) ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2b, 0x4, {{@in6=@loopback, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x200000, 0x20000000, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x820000000000002}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@empty, 0x0, 0x3c}, 0x2, @in=@multicast1, 0x6, 0x4, 0x3}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x8001}, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) syz_clone(0x220000, &(0x7f0000000000), 0x0, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000300)="e0e9ac8858bdf486ced3001ca3f9f64854cb678327ae5ae4bc624e15bf7a910444c7556d8c19078713599fbeb5789d7cbb067c970fa1206231101ed9b7dfbd96ff6ed053d6d9ca247ad30f1a155dd5dd6b60dd802e406c97d60b8e50af7fc271c33e6fb1b5adda0b0ef284ac51b26989803514e81dd066b2b831f7d858139bc4d3013a0a1b71a1f995078cb60e4427e70ebb38ed1b596d94a241beb70cfb4861e72c7f8ea1e058167abeeff3f76300ba68afa022f287acf01a7f486e3f2fd67150b2") r6 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_GET_UNALIGN(0x5, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000300)={0x0, 0xff97, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="88000000000101040000000000000000020000002c00018014000180080001007f00000108000200e00000020c000280050001000000000006000340000300002400028014000180080001000000000008000200ac1414bb0c000280050001000000000008000740000000001c000f8008000140000000000800034000000000080002"], 0x88}}, 0x0) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="02"], 0x4) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000eee293acbae7df98d7a00ef3722e98f402e4187b4873c9fd2d4493431d610b2a256dc2e7e327", @ANYRES16=r8, @ANYBLOB="090528bd7000fddbdf250e00000008000300", @ANYRES32, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x1772cb5081a3ae1b}, 0x2004000) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="02c99019001500010010df040002000a000105d202000900e5"], 0x1e) socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) 5.642977158s ago: executing program 1 (id=46): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x82000, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0xc, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x762, 0x0, 0x0, 0x0, 0x3}, [@alu={0x4, 0x0, 0x9, 0x0, 0x9, 0x80, 0x4}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfc}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x8}]}, &(0x7f0000000200)='GPL\x00', 0xfffff191, 0xb8, &(0x7f0000000240)=""/184, 0x40f00, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x3, 0x1, 0x5, 0x2}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000380)=[0x1, 0xffffffffffffffff, 0x1, r0, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff], &(0x7f00000003c0)=[{0x2, 0x2, 0x2, 0x3}, {0x4, 0x5, 0x0, 0xb}, {0x5, 0x5, 0x10, 0x5}, {0x2, 0x5, 0xb, 0xa}, {0x3, 0x3, 0x9, 0x8}, {0x3, 0x3, 0xc, 0x4}], 0x10, 0x6}, 0x94) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netlink\x00') lseek(r1, 0x339, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000500)=r1, 0x61) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000000)=""/210) 4.734206615s ago: executing program 1 (id=48): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='attr/fscreate\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000140)) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f0000000200)=0x3, 0x4) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x8000, 0x0) chdir(&(0x7f0000000380)='./file1\x00') symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) r4 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r4, 0x1, &(0x7f0000000340)={0x2000, r5}, 0x0) landlock_restrict_self(r4, 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002ec0000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYBLOB="0000000000000000b7020000000000008500000008000000bf"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.733904485s ago: executing program 0 (id=49): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x42, 0x0) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x949902, 0x0) ioctl$PTP_PEROUT_REQUEST2(r1, 0x40383d0c, &(0x7f00000000c0)={{0x4, 0xac}, {0x8000000000000000, 0xfffffffc}, 0x80000005, 0x2}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = gettid() r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000040)={0x1, 0x1, 0x5000, 0x2000, &(0x7f0000fa2000/0x2000)=nil}) ioctl$KVM_CREATE_DEVICE(r5, 0xc018aec0, &(0x7f0000000040)={0x1}) r6 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) fchdir(r7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x8b}, 0x0) openat$fb0(0xffffffffffffff9c, 0x0, 0x2000, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x34}}, 0x0) r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents64(r9, &(0x7f0000000f80)=""/4096, 0x1000) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) sendmsg$nl_generic(r2, &(0x7f0000001300)={0x0, 0x0, &(0x7f00000012c0)={&(0x7f0000000080)={0x14, 0x42, 0x1, 0x70bd2d, 0x25dfdbfe, {0x1f}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x40040) pwrite64(r0, 0x0, 0x0, 0x7) 4.648870773s ago: executing program 3 (id=50): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$HIDIOCGFLAG(0xffffffffffffffff, 0x8004480e, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003}, 0x38) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0, 0x4c}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4000084) r3 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0xe20, 0x0, @mcast2}, 0x1c) sendto$inet6(r3, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f0000000640)=0x3, 0x4) setsockopt$inet6_udp_int(r3, 0x88, 0x1, &(0x7f0000000080), 0x4) mount(0x0, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000200)='nilfs2\x00', 0x410, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80008) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r4, 0x29, 0x24, 0x0, 0x0) 4.620225174s ago: executing program 4 (id=51): r0 = socket$inet6(0xa, 0x2, 0x3a) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r0}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) socket$nl_route(0x10, 0x3, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)='c:::\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = gettid() timer_create(0x8, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSBRKP(r4, 0x5425, 0x2000000) r5 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) readv(r5, &(0x7f0000000300)=[{0x0}, {&(0x7f00000007c0)=""/99, 0x63}], 0x2) 4.522660418s ago: executing program 1 (id=52): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x40, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x20000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES64=r2], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000080)='./file1\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r5, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x2, 0x0, 0x0, 0x7fff, 0x2, 0x3, 0x0, 0x6, 0x7fffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r6 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r6, &(0x7f0000001600)='./file1\x00', 0x0, 0x1) chdir(&(0x7f00000003c0)='./bus\x00') link(&(0x7f0000000480)='./file1\x00', &(0x7f00000004c0)='./file0\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x8, 0x1c, &(0x7f00000005c0)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 3.430123629s ago: executing program 3 (id=53): fanotify_mark(0xffffffffffffffff, 0x105, 0x5000003a, 0xffffffffffffffff, 0x0) creat(0x0, 0x10) mknod(0x0, 0x8001420, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r1, 0x0) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r2}, 0x8) getdents64(r2, &(0x7f0000002f40)=""/4098, 0x1002) 3.248375394s ago: executing program 2 (id=54): mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 3.005431735s ago: executing program 3 (id=55): syz_open_dev$video4linux(&(0x7f00000000c0), 0x5, 0x80882) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000840)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f0000000bc0)="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", 0x12d, r0) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0xd, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) write$qrtrtun(r1, &(0x7f0000000300)="05c164fd53fcb2e8", 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={r1, 0x0, 0x30, 0x5, @void}, 0x2) openat$cgroup_ro(r1, &(0x7f0000000140)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x800010, 0x800000000004, @thr={0x0, &(0x7f0000000400)="9b07dc4c118baf649e5fda459ed1418befe1cc19bcfa9e6269cefc727fc4b4f3da7c1a"}}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000005, 0x2010, r3, 0x2c41e000) syz_clone(0x53040000, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_complete(0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r6, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) preadv(r6, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) 2.93293695s ago: executing program 0 (id=56): mkdir(&(0x7f0000000100)='./control\x00', 0x184) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002300)={'wlan1\x00', 0x0}) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000001100)=@nat={'nat\x00', 0x62, 0x5, 0x1510, 0x0, 0x0, 0xffffffff, 0x10c8, 0x1288, 0x1478, 0x1478, 0xffffffff, 0x1478, 0x1478, 0x5, 0x0, {[{{@ip={@multicast2, @dev={0xac, 0x14, 0x14, 0x29}, 0x0, 0x0, 'veth0_to_bond\x00', 'wg1\x00', {0xff}}, 0x0, 0x10a0, 0x10c8, 0x0, {0x22e}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup.net/syz0\x00', 0x9, {0x100000001}}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x3, 0x6}}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x3dc, {0x0, @rand_addr=0x64010102, @remote, @port=0x4e21, @gre_key}}}}, {{@ip={@broadcast, @rand_addr=0x64010100, 0x0, 0x0, 'veth1_to_team\x00', 'syzkaller1\x00'}, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@socket0={{0x20}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @private, @multicast2, @gre_key, @icmp_id}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'pimreg1\x00', 'netdevsim0\x00'}, 0x0, 0x1b8, 0x1f0, 0x0, {}, [@common=@unspec=@comment={{0x120}}, @common=@icmp={{0x28}, {0x0, "6e82"}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @broadcast, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x1570) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x4e21, @remote}, {0x2, 0x4e23, @remote}, {0x2, 0x4e24, @empty}, 0x52, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000080)='dvmrp0\x00', 0x2, 0x4, 0xfd8}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="00000000ca662322529fef8d41e22b881be985a2bd14afaa2fdd5bcc875499856be242701808a61ac746d5736eac82d4c02cd4b1d0abca25bb7e0450d5a2df4e7572a54417c000ad8798b87d2aa3f1da7dc0ccfafddb2b478ea7e8573f1a30a140be9e2c550e890ffe4a3edfc862", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x801) 2.73256424s ago: executing program 2 (id=57): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="200000001000010700000000e9ffffff0a0000000c0002006e6c3830323131"], 0x20}, 0x1, 0x0, 0x0, 0x200c4800}, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRES32=r0, @ANYRESHEX=r0, @ANYRES8=0x0], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = openat$userio(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) pwritev(r2, &(0x7f0000000400)=[{&(0x7f0000000380)="49db", 0x2}], 0x1, 0xfffffc00, 0x4) r3 = syz_clone(0x80000, &(0x7f0000000c40)="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", 0x1000, &(0x7f00000001c0), &(0x7f0000000240), &(0x7f0000000680)="2db5f67a223128ccfa213352b9a1d4ee0dddabd9696627b60ecbfcf72bd19ec1ac575e84ee794f9e270802618f648eb8da0651a960019fb0c2536f9b096b86f22af59bfa8d1dc0e0dbbcb297feb2cae505bd5e51085dfadf83c9edc365a258922aa4537ffa3998fa656268018813a22b78c4b7a67f52595ef58c042233193c3496d5eac2c6095272f9f676de8229e4e611bb4f0b3d9d49ccbbed94298306238545da8087a7b682a3195d2ccc31989ccdf110ee7576e08cc39fb986a842fc63be04c16a478664a657d62a4aeb68191672114099147a9a569c4d36c037f836") sched_setscheduler(r3, 0x6, &(0x7f0000000080)=0x2) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r8}, 0x10) r9 = socket$pppl2tp(0x18, 0x1, 0x1) getpeername(r9, 0x0, &(0x7f0000000040)) r10 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r10, 0x541c, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1d, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffd, 0x5}, 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x11, r1, 0x0) msync(&(0x7f000081e000/0x3000)=nil, 0x3000, 0x6) 2.614220066s ago: executing program 0 (id=58): r0 = creat(&(0x7f0000000400)='./bus\x00', 0x0) r1 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) truncate(&(0x7f0000000040)='./bus\x00', 0x9472) lsetxattr$security_ima(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000180), &(0x7f0000000240)=@ng={0x4, 0x12}, 0x2, 0x0) dup3(r1, r0, 0x0) finit_module(r1, 0x0, 0x0) 2.580199482s ago: executing program 1 (id=59): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) r1 = getpid() syz_pidfd_open(r1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, 0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(0x0, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r4, 0x47f6, 0x0, 0x4, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$VHOST_SET_FEATURES(r6, 0x4008af00, &(0x7f0000000200)=0x8000000) r7 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x18}, 0x0) sendmsg$kcm(r7, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x4e21, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c"], 0x10b8}, 0x20000000) sendmsg$kcm(r7, 0x0, 0x0) socket(0x22, 0x2, 0x24) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=@newtaction={0x98, 0x32, 0x1, 0x0, 0x0, {}, [{0x84, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0xfffffcdc}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xc, 0x762, 0x5, 0xc, 0x9}, 0x1}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0xffffffff}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4040}, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000180)={0x5, 0x8, 0x2, 0x1}, 0x0) 2.423462769s ago: executing program 0 (id=60): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x7b) r1 = accept4(r0, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000f00)={'veth1_macvtap\x00', &(0x7f00000003c0)=@ethtool_perm_addr={0x4b, 0x44, "4b721b782a17a7b6a00d963e3f7fdafda2073830fb8cfb34eb7cbd173ed6f04cba5a1e6a6f0ef6c61346d54f61bd850519514421d1f3050000f99b355dcb6ab9ed36e7e2"}}) syz_open_dev$MSR(&(0x7f0000000040), 0x800000000000, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="4d0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4003, 0x1}, 0x48) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmmsg$inet(r1, &(0x7f0000001200)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000003c0)="ba", 0x1}, {&(0x7f00000005c0)='0', 0xcea40}], 0x2}}], 0x1, 0x0) 2.145262213s ago: executing program 3 (id=61): r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect={0x300}) 1.762640739s ago: executing program 0 (id=62): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) setsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f0000000040)=0xf, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r4, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000000100)="bc", 0x1, 0x4, &(0x7f00000000c0)={0xa, 0x4e20, 0x8, @loopback, 0x1}, 0x1c) close(r4) 1.526406274s ago: executing program 4 (id=63): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$HIDIOCGFLAG(0xffffffffffffffff, 0x8004480e, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003}, 0x38) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0, 0x4c}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4000084) r3 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0xe20, 0x0, @mcast2}, 0x1c) sendto$inet6(r3, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f0000000640)=0x3, 0x4) setsockopt$inet6_udp_int(r3, 0x88, 0x1, &(0x7f0000000080), 0x4) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, '\x00', [{0x6, 0x2, 0x0, 0x3, 0x4, 0x4}, {0x1, 0x2, 0x3ff, 0x4, 0x1, 0x8}], ['\x00']}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80008) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r4, 0x29, 0x24, 0x0, 0x0) 733.940518ms ago: executing program 0 (id=64): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x3ffffffffffffffd, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x359b171663d45917}, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000004c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f00000005c0)={0x0, 0x0, r7, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000440)={r8, 0x0, 0x0, 0x0, 0x0, [0x0], [0x7, 0x0, 0x0, 0x7], [0x0, 0x0, 0x0, 0xfffffffc], [0x6, 0x4, 0x4]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000200)={r9, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000000)={0x0, 0x0, r10}) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r12 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r12}}) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) 619.356687ms ago: executing program 3 (id=65): fanotify_mark(0xffffffffffffffff, 0x105, 0x5000003a, 0xffffffffffffffff, 0x0) creat(0x0, 0x10) mknod(0x0, 0x8001420, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r1, 0x0) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r2}, 0x8) getdents64(r2, &(0x7f0000002f40)=""/4098, 0x1002) 440.008µs ago: executing program 2 (id=66): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x19, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) fsopen(&(0x7f0000000100)='ocfs2_dlmfs\x00', 0x0) r1 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x2180, 0x0) r2 = add_key$fscrypt_provisioning(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, &(0x7f00000009c0)=ANY=[], 0x48, 0xfffffffffffffffe) keyctl$search(0xa, r2, &(0x7f00000004c0)='cifs.idmap\x00', &(0x7f0000000500)={'syz', 0x3}, 0xfffffffffffffff9) ioctl$F2FS_IOC_SET_PIN_FILE(r1, 0x4004f50d, 0x0) select(0x0, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, &(0x7f0000000140)={0x77359400}) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000280)={'pcl812\x00', [0x2f00, 0x10000005, 0x3, 0x2, 0x9, 0x0, 0x1, 0x10, 0xffe, 0x1, 0xc, 0x1, 0x4, 0x4, 0xffef, 0x6, 0xffffffa7, 0x40000009, 0x8, 0x30000, 0x3ff, 0x9, 0x800, 0xe2df, 0x2, 0x2, 0x80, 0x3, 0x4, 0x7, 0x70f]}) r3 = openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r3, 0x40806685, 0x0) io_setup(0x7, &(0x7f0000000200)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, 0x0, 0x0) sendmmsg(r4, &(0x7f0000001c00), 0x400000000000159, 0x40840) r6 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x240, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r7, 0xc004ae0a, 0x0) ioctl$TCFLSH(r6, 0x400455c8, 0x4) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x1, 0x0) 0s ago: executing program 3 (id=67): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000b0c000/0x2000)=nil) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.91' (ED25519) to the list of known hosts. [ 68.098973][ T5825] cgroup: Unknown subsys name 'net' [ 68.208007][ T5825] cgroup: Unknown subsys name 'cpuset' [ 68.216488][ T5825] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 69.559190][ T5825] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.309140][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.315541][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.158031][ T5839] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 72.167073][ T5839] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 72.179289][ T5844] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 72.186870][ T5844] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 72.195305][ T5839] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 72.202801][ T5839] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 72.221022][ T5850] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 72.228620][ T5850] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 72.245193][ T5850] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 72.266412][ T5857] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 72.289330][ T5855] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 72.296680][ T5857] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 72.297196][ T5854] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 72.305202][ T5857] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 72.318080][ T5855] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 72.326263][ T5857] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 72.326492][ T5854] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 72.336610][ T5857] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 72.348708][ T5857] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 72.349368][ T5850] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 72.356307][ T5857] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 72.378694][ T5842] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 72.392731][ T5842] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 72.428869][ T5844] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 72.436575][ T5844] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 72.936481][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 73.075670][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 73.130391][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 73.215796][ T5847] chnl_net:caif_netlink_parms(): no params data found [ 73.267732][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.274939][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.282447][ T5837] bridge_slave_0: entered allmulticast mode [ 73.291123][ T5837] bridge_slave_0: entered promiscuous mode [ 73.326704][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.333849][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.342614][ T5837] bridge_slave_1: entered allmulticast mode [ 73.349785][ T5837] bridge_slave_1: entered promiscuous mode [ 73.463686][ T5845] chnl_net:caif_netlink_parms(): no params data found [ 73.497146][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.508125][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.516442][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.523684][ T5835] bridge_slave_0: entered allmulticast mode [ 73.531342][ T5835] bridge_slave_0: entered promiscuous mode [ 73.544188][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.551872][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.559194][ T5836] bridge_slave_0: entered allmulticast mode [ 73.566938][ T5836] bridge_slave_0: entered promiscuous mode [ 73.596932][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.620742][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.628377][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.637363][ T5835] bridge_slave_1: entered allmulticast mode [ 73.644650][ T5835] bridge_slave_1: entered promiscuous mode [ 73.660261][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.667445][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.674520][ T5836] bridge_slave_1: entered allmulticast mode [ 73.683468][ T5836] bridge_slave_1: entered promiscuous mode [ 73.690359][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.697794][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.705584][ T5847] bridge_slave_0: entered allmulticast mode [ 73.712482][ T5847] bridge_slave_0: entered promiscuous mode [ 73.781643][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.789133][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.797201][ T5847] bridge_slave_1: entered allmulticast mode [ 73.804084][ T5847] bridge_slave_1: entered promiscuous mode [ 73.813159][ T5837] team0: Port device team_slave_0 added [ 73.823250][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.874500][ T5837] team0: Port device team_slave_1 added [ 73.882962][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.900075][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.912137][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.950418][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.961812][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.030679][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.040206][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.066596][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.081145][ T5835] team0: Port device team_slave_0 added [ 74.090718][ T5835] team0: Port device team_slave_1 added [ 74.133190][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.142203][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.168495][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.192838][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.200123][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.207632][ T5845] bridge_slave_0: entered allmulticast mode [ 74.214468][ T5845] bridge_slave_0: entered promiscuous mode [ 74.223765][ T5836] team0: Port device team_slave_0 added [ 74.232412][ T5847] team0: Port device team_slave_0 added [ 74.241707][ T5847] team0: Port device team_slave_1 added [ 74.266341][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.273284][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.299728][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.312442][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.319765][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.327397][ T5845] bridge_slave_1: entered allmulticast mode [ 74.334310][ T5845] bridge_slave_1: entered promiscuous mode [ 74.343255][ T5836] team0: Port device team_slave_1 added [ 74.373828][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.381152][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.407790][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.420121][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.425895][ T5839] Bluetooth: hci0: command tx timeout [ 74.427458][ T5842] Bluetooth: hci2: command tx timeout [ 74.432716][ T5839] Bluetooth: hci3: command tx timeout [ 74.438241][ T5844] Bluetooth: hci1: command tx timeout [ 74.444024][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.475860][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.505105][ T5844] Bluetooth: hci4: command tx timeout [ 74.530169][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.537458][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.563730][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.587209][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.600185][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.622445][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.629620][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.655530][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.752108][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.759604][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.785624][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.810394][ T5837] hsr_slave_0: entered promiscuous mode [ 74.817908][ T5837] hsr_slave_1: entered promiscuous mode [ 74.828097][ T5835] hsr_slave_0: entered promiscuous mode [ 74.834252][ T5835] hsr_slave_1: entered promiscuous mode [ 74.840603][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.848612][ T5835] Cannot create hsr debugfs directory [ 74.868352][ T5845] team0: Port device team_slave_0 added [ 74.881069][ T5847] hsr_slave_0: entered promiscuous mode [ 74.887721][ T5847] hsr_slave_1: entered promiscuous mode [ 74.893904][ T5847] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.901548][ T5847] Cannot create hsr debugfs directory [ 74.928579][ T5845] team0: Port device team_slave_1 added [ 75.005279][ T5836] hsr_slave_0: entered promiscuous mode [ 75.011503][ T5836] hsr_slave_1: entered promiscuous mode [ 75.017643][ T5836] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.025293][ T5836] Cannot create hsr debugfs directory [ 75.073073][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.080124][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.106598][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.128126][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.135177][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.161646][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.384381][ T5845] hsr_slave_0: entered promiscuous mode [ 75.390833][ T5845] hsr_slave_1: entered promiscuous mode [ 75.397599][ T5845] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.405218][ T5845] Cannot create hsr debugfs directory [ 75.688054][ T5837] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 75.714695][ T5837] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 75.726561][ T5837] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 75.757918][ T5837] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 75.802958][ T5836] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 75.813351][ T5836] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 75.836644][ T5836] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 75.858306][ T5836] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 75.903484][ T5835] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 75.915503][ T5835] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 75.934096][ T5835] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 75.962490][ T5835] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 76.046912][ T5847] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 76.061659][ T5847] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 76.074514][ T5847] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 76.084345][ T5847] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 76.182152][ T5845] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 76.208921][ T5845] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 76.221376][ T5845] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 76.232543][ T5845] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 76.322792][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.334297][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.388436][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.405503][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.421062][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.428446][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.459723][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.466881][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.478260][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.485380][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.505635][ T5844] Bluetooth: hci1: command tx timeout [ 76.505689][ T5839] Bluetooth: hci3: command tx timeout [ 76.511054][ T5857] Bluetooth: hci0: command tx timeout [ 76.522157][ T5842] Bluetooth: hci2: command tx timeout [ 76.532131][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.539288][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.585576][ T5842] Bluetooth: hci4: command tx timeout [ 76.636809][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.664235][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.699383][ T5837] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 76.729731][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.746524][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.763228][ T5847] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.804347][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.821371][ T151] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.828558][ T151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.842144][ T151] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.849315][ T151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.874179][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.881352][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.920463][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.927567][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.937941][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.945154][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.977602][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.984791][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.137640][ T5835] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 77.270200][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.483263][ T5837] veth0_vlan: entered promiscuous mode [ 77.500385][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.571284][ T5837] veth1_vlan: entered promiscuous mode [ 77.734770][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.750343][ T5836] veth0_vlan: entered promiscuous mode [ 77.764279][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.791102][ T5836] veth1_vlan: entered promiscuous mode [ 77.801732][ T5837] veth0_macvtap: entered promiscuous mode [ 77.820406][ T5837] veth1_macvtap: entered promiscuous mode [ 77.842216][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.901967][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.938916][ T5836] veth0_macvtap: entered promiscuous mode [ 77.958657][ T5836] veth1_macvtap: entered promiscuous mode [ 77.986460][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.044755][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.063483][ T5837] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.072770][ T5837] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.089414][ T5837] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.103438][ T5837] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.134697][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.169619][ T5836] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.179828][ T5836] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.189219][ T5836] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.198045][ T5836] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.217003][ T5845] veth0_vlan: entered promiscuous mode [ 78.223325][ T5835] veth0_vlan: entered promiscuous mode [ 78.250534][ T5835] veth1_vlan: entered promiscuous mode [ 78.297953][ T5845] veth1_vlan: entered promiscuous mode [ 78.356511][ T5847] veth0_vlan: entered promiscuous mode [ 78.394085][ T5835] veth0_macvtap: entered promiscuous mode [ 78.414412][ T5835] veth1_macvtap: entered promiscuous mode [ 78.424464][ T5847] veth1_vlan: entered promiscuous mode [ 78.459194][ T1173] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.476951][ T1173] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.491694][ T3570] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.504211][ T3570] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.531093][ T5847] veth0_macvtap: entered promiscuous mode [ 78.570007][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.582236][ T5847] veth1_macvtap: entered promiscuous mode [ 78.593832][ T5842] Bluetooth: hci3: command tx timeout [ 78.593866][ T5857] Bluetooth: hci1: command tx timeout [ 78.600415][ T5839] Bluetooth: hci0: command tx timeout [ 78.605072][ T5844] Bluetooth: hci2: command tx timeout [ 78.627933][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.636004][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.646907][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.664125][ T5845] veth0_macvtap: entered promiscuous mode [ 78.677097][ T5844] Bluetooth: hci4: command tx timeout [ 78.679788][ T1173] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.685012][ T5845] veth1_macvtap: entered promiscuous mode [ 78.698468][ T1173] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.704080][ T5835] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.716809][ T5835] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.725620][ T5835] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.735477][ T5835] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.800425][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.819363][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.824423][ T5837] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 78.860790][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.901727][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.939249][ T5845] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.960958][ T5845] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.018512][ T5845] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.031180][ T5845] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.049268][ T5847] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.062369][ T5847] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.073195][ T5847] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.085163][ T5847] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.148096][ T30] audit: type=1326 audit(1752799474.675:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5958 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68c4b8e929 code=0x7ffc0000 [ 79.173153][ T5961] futex_wake_op: syz.2.3 tries to shift op by 36; fix this program [ 79.178627][ T30] audit: type=1326 audit(1752799474.675:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5958 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68c4b8e929 code=0x7ffc0000 [ 79.217954][ T30] audit: type=1326 audit(1752799474.675:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5958 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f68c4b8e929 code=0x7ffc0000 [ 79.250693][ T30] audit: type=1326 audit(1752799474.675:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5958 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68c4b8e929 code=0x7ffc0000 [ 79.307326][ T5963] FAULT_INJECTION: forcing a failure. [ 79.307326][ T5963] name failslab, interval 1, probability 0, space 0, times 1 [ 79.320082][ T5963] CPU: 0 UID: 0 PID: 5963 Comm: syz.1.2 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(full) [ 79.320102][ T5963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 79.320118][ T5963] Call Trace: [ 79.320129][ T5963] [ 79.320137][ T5963] dump_stack_lvl+0x189/0x250 [ 79.320166][ T5963] ? lockdep_hardirqs_on+0x9c/0x150 [ 79.320183][ T5963] ? __pfx_dump_stack_lvl+0x10/0x10 [ 79.320218][ T5963] should_fail_ex+0x414/0x560 [ 79.320249][ T5963] should_failslab+0xa8/0x100 [ 79.320269][ T5963] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 79.320287][ T5963] ? __alloc_skb+0x112/0x2d0 [ 79.320312][ T5963] __alloc_skb+0x112/0x2d0 [ 79.320337][ T5963] netlink_sendmsg+0x5c6/0xb30 [ 79.320357][ T5963] ? rcu_is_watching+0x15/0xb0 [ 79.320384][ T5963] ? __pfx_netlink_sendmsg+0x10/0x10 [ 79.320413][ T5963] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 79.320429][ T5963] ? __pfx_netlink_sendmsg+0x10/0x10 [ 79.320469][ T5963] __sock_sendmsg+0x219/0x270 [ 79.320491][ T5963] ____sys_sendmsg+0x505/0x830 [ 79.320520][ T5963] ? __pfx_____sys_sendmsg+0x10/0x10 [ 79.320552][ T5963] ? import_iovec+0x74/0xa0 [ 79.320583][ T5963] ___sys_sendmsg+0x21f/0x2a0 [ 79.320609][ T5963] ? __pfx____sys_sendmsg+0x10/0x10 [ 79.320668][ T5963] ? __fget_files+0x2a/0x420 [ 79.320685][ T5963] ? __fget_files+0x3a0/0x420 [ 79.320713][ T5963] __x64_sys_sendmsg+0x19b/0x260 [ 79.320734][ T5963] ? schedule+0x165/0x360 [ 79.320759][ T5963] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 79.320800][ T5963] ? do_syscall_64+0xbe/0x3b0 [ 79.320821][ T5963] do_syscall_64+0xfa/0x3b0 [ 79.320838][ T5963] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.320853][ T5963] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 79.320869][ T5963] ? clear_bhb_loop+0x60/0xb0 [ 79.320888][ T5963] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.320904][ T5963] RIP: 0033:0x7f51e958e929 [ 79.320923][ T5963] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 79.320936][ T5963] RSP: 002b:00007f51e73b4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 79.320954][ T5963] RAX: ffffffffffffffda RBX: 00007f51e97b6160 RCX: 00007f51e958e929 [ 79.320966][ T5963] RDX: 0000000000000880 RSI: 0000200000000300 RDI: 000000000000000c [ 79.320976][ T5963] RBP: 00007f51e73b4090 R08: 0000000000000000 R09: 0000000000000000 [ 79.320986][ T5963] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 79.320996][ T5963] R13: 0000000000000000 R14: 00007f51e97b6160 R15: 00007ffe7c53ba28 [ 79.321023][ T5963] [ 79.576766][ T30] audit: type=1326 audit(1752799474.705:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5958 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68c4b8e929 code=0x7ffc0000 [ 79.612601][ T30] audit: type=1326 audit(1752799474.705:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5958 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f68c4b8e929 code=0x7ffc0000 [ 79.647584][ T30] audit: type=1326 audit(1752799474.705:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5958 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68c4b8e929 code=0x7ffc0000 [ 79.669506][ T30] audit: type=1326 audit(1752799474.705:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5958 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68c4b8e929 code=0x7ffc0000 [ 79.683881][ T1173] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.690832][ T30] audit: type=1326 audit(1752799474.705:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5958 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68c4b8e929 code=0x7ffc0000 [ 79.718825][ T1173] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.724800][ T30] audit: type=1326 audit(1752799474.725:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5958 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68c4b8e929 code=0x7ffc0000 [ 79.845316][ T978] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 79.905424][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.956911][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.012902][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.030581][ T978] usb 3-1: Using ep0 maxpacket: 32 [ 80.036645][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.064339][ T978] usb 3-1: config 0 has an invalid interface number: 137 but max is 0 [ 80.074102][ T978] usb 3-1: config 0 has no interface number 0 [ 80.135825][ T978] usb 3-1: Dual-Role OTG device on HNP port [ 80.155129][ T978] usb 3-1: New USB device found, idVendor=0e41, idProduct=5057, bcdDevice=27.bd [ 80.176144][ T978] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.184169][ T978] usb 3-1: Product: syz [ 80.215542][ T978] usb 3-1: Manufacturer: syz [ 80.220175][ T978] usb 3-1: SerialNumber: syz [ 80.284612][ T1173] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.304814][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.330262][ T1173] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.339845][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.419119][ T978] usb 3-1: config 0 descriptor?? [ 80.626530][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.639119][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.666981][ T5839] Bluetooth: hci2: command tx timeout [ 80.672445][ T5839] Bluetooth: hci3: command tx timeout [ 80.679823][ T5842] Bluetooth: hci1: command tx timeout [ 80.685493][ T5844] Bluetooth: hci0: command tx timeout [ 80.744569][ T978] snd_usb_podhd 3-1:0.137: Line 6 POD HD300 found [ 80.752055][ T978] usb 3-1: selecting invalid altsetting 5 [ 80.758074][ T5839] Bluetooth: hci4: command tx timeout [ 80.826031][ T978] snd_usb_podhd 3-1:0.137: set_interface failed [ 80.896225][ T978] snd_usb_podhd 3-1:0.137: Line 6 POD HD300 now disconnected [ 81.428974][ T978] snd_usb_podhd 3-1:0.137: probe with driver snd_usb_podhd failed with error -22 [ 81.458537][ T978] usb 3-1: USB disconnect, device number 2 [ 81.693331][ T5986] ceph: Bad value for 'source' [ 81.726498][ T1212] cfg80211: failed to load regulatory.db [ 81.905342][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 81.914352][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 81.945533][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 82.008303][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 82.110094][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 82.119191][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 82.315516][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 82.417695][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 82.426658][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 82.455452][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 82.915444][ T5998] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12'. [ 83.196351][ T6004] netlink: 60 bytes leftover after parsing attributes in process `syz.3.11'. [ 83.283868][ T6000] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 84.235499][ T24] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 84.507893][ T24] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 84.613223][ T24] usb 3-1: config 0 has no interface number 0 [ 84.836305][ T24] usb 3-1: New USB device found, idVendor=0403, idProduct=da71, bcdDevice=a2.95 [ 84.855025][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.892794][ T24] usb 3-1: Product: syz [ 84.900848][ T24] usb 3-1: Manufacturer: syz [ 84.922143][ T24] usb 3-1: SerialNumber: syz [ 84.950582][ T24] usb 3-1: config 0 descriptor?? [ 85.020882][ T24] usb 3-1: NDI device with a latency value of 1 [ 85.231801][ T6015] netlink: 16 bytes leftover after parsing attributes in process `syz.2.16'. [ 85.275300][ T24] ftdi_sio 3-1:0.8: FTDI USB Serial Device converter detected [ 85.352740][ T24] ftdi_sio ttyUSB0: unknown device type: 0xa295 [ 85.437400][ T24] usb 3-1: USB disconnect, device number 3 [ 85.488388][ T24] ftdi_sio 3-1:0.8: device disconnected [ 86.377658][ T6031] Invalid ELF header magic: != ELF [ 88.095757][ T6043] FAULT_INJECTION: forcing a failure. [ 88.095757][ T6043] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 88.141350][ T6043] CPU: 1 UID: 0 PID: 6043 Comm: syz.4.23 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(full) [ 88.141365][ T6043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 88.141371][ T6043] Call Trace: [ 88.141375][ T6043] [ 88.141380][ T6043] dump_stack_lvl+0x189/0x250 [ 88.141395][ T6043] ? __pfx____ratelimit+0x10/0x10 [ 88.141405][ T6043] ? __pfx_dump_stack_lvl+0x10/0x10 [ 88.141415][ T6043] ? __pfx__printk+0x10/0x10 [ 88.141426][ T6043] ? __might_fault+0xb0/0x130 [ 88.141441][ T6043] should_fail_ex+0x414/0x560 [ 88.141458][ T6043] _copy_from_user+0x2d/0xb0 [ 88.141471][ T6043] __se_sys_sendfile64+0xa6/0x190 [ 88.141484][ T6043] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 88.141492][ T6043] ? rcu_is_watching+0x15/0xb0 [ 88.141505][ T6043] ? do_syscall_64+0xbe/0x3b0 [ 88.141516][ T6043] do_syscall_64+0xfa/0x3b0 [ 88.141525][ T6043] ? lockdep_hardirqs_on+0x9c/0x150 [ 88.141534][ T6043] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.141542][ T6043] ? clear_bhb_loop+0x60/0xb0 [ 88.141553][ T6043] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.141562][ T6043] RIP: 0033:0x7f8ea6f8e929 [ 88.141571][ T6043] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 88.141578][ T6043] RSP: 002b:00007f8ea7d5e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 88.141589][ T6043] RAX: ffffffffffffffda RBX: 00007f8ea71b5fa0 RCX: 00007f8ea6f8e929 [ 88.141595][ T6043] RDX: 0000200000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 88.141601][ T6043] RBP: 00007f8ea7d5e090 R08: 0000000000000000 R09: 0000000000000000 [ 88.141606][ T6043] R10: 0080000000000006 R11: 0000000000000246 R12: 0000000000000001 [ 88.141612][ T6043] R13: 0000000000000000 R14: 00007f8ea71b5fa0 R15: 00007ffd0b8058e8 [ 88.141626][ T6043] [ 88.598022][ T6042] syz.3.25: attempt to access beyond end of device [ 88.598022][ T6042] loop7: rw=0, sector=2, nr_sectors = 2 limit=0 [ 88.639132][ T6042] syz.3.25: attempt to access beyond end of device [ 88.639132][ T6042] loop7: rw=0, sector=16, nr_sectors = 2 limit=0 [ 89.005224][ T5954] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 89.152497][ T6058] erofs (device nullb0): cannot find valid erofs superblock [ 89.197937][ T5954] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.243326][ T5954] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 89.317003][ T5954] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 89.393312][ T5954] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.538225][ T5954] usb 1-1: config 0 descriptor?? [ 89.965102][ T5954] usbhid 1-1:0.0: can't add hid device: -71 [ 89.971149][ T5954] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 89.996483][ T5954] usb 1-1: USB disconnect, device number 2 [ 90.845977][ T6072] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 95.315361][ T6106] erofs (device nullb0): cannot find valid erofs superblock [ 95.726300][ T6101] overlay: ./file0 is not a directory [ 96.077460][ T6119] unsupported nla_type 52263 [ 96.711136][ T6122] syz.4.44 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 97.145070][ T6129] erofs (device nullb0): cannot find valid erofs superblock [ 97.795222][ T5844] Bluetooth: hci3: ACL packet too small [ 99.901538][ T6160] xt_nat: multiple ranges no longer supported [ 101.825722][ T6171] delete_channel: no stack [ 102.630202][ T6196] Zero length message leads to an empty skb [ 102.718463][ T6196] 9pnet_fd: Insufficient options for proto=fd [ 103.221280][ T6203] ------------[ cut here ]------------ [ 103.227193][ T6203] UBSAN: shift-out-of-bounds in drivers/comedi/drivers/pcl812.c:1152:10 [ 103.235819][ T6203] shift exponent 268435461 is too large for 32-bit type 'int' [ 103.243426][ T6203] CPU: 0 UID: 0 PID: 6203 Comm: syz.2.66 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(full) [ 103.243448][ T6203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 103.243455][ T6203] Call Trace: [ 103.243461][ T6203] [ 103.243465][ T6203] dump_stack_lvl+0x189/0x250 [ 103.243483][ T6203] ? __pfx_dump_stack_lvl+0x10/0x10 [ 103.243494][ T6203] ? __pfx__printk+0x10/0x10 [ 103.243506][ T6203] ? __pfx_i8254_io8_cb+0x10/0x10 [ 103.243519][ T6203] ? __ubsan_handle_shift_out_of_bounds+0xf9/0x410 [ 103.243535][ T6203] ubsan_epilogue+0xa/0x40 [ 103.243547][ T6203] __ubsan_handle_shift_out_of_bounds+0x386/0x410 [ 103.243570][ T6203] pcl812_attach+0x1b9e/0x2300 [ 103.243584][ T6203] ? __pfx_pcl812_attach+0x10/0x10 [ 103.243599][ T6203] comedi_device_attach+0x520/0x670 [ 103.243613][ T6203] comedi_unlocked_ioctl+0x686/0xf40 [ 103.243632][ T6203] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 103.243654][ T6203] ? __pfx_smack_log+0x10/0x10 [ 103.243667][ T6203] ? smk_access+0x14c/0x4e0 [ 103.243683][ T6203] ? smk_tskacc+0x2fc/0x370 [ 103.243697][ T6203] ? smack_file_ioctl+0x24a/0x340 [ 103.243711][ T6203] ? __pfx_smack_file_ioctl+0x10/0x10 [ 103.243729][ T6203] ? __fget_files+0x2a/0x420 [ 103.243739][ T6203] ? __fget_files+0x3a0/0x420 [ 103.243748][ T6203] ? __fget_files+0x2a/0x420 [ 103.243759][ T6203] ? bpf_lsm_file_ioctl+0x9/0x20 [ 103.243770][ T6203] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 103.243782][ T6203] __se_sys_ioctl+0xfc/0x170 [ 103.243797][ T6203] do_syscall_64+0xfa/0x3b0 [ 103.243807][ T6203] ? lockdep_hardirqs_on+0x9c/0x150 [ 103.243816][ T6203] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.243825][ T6203] ? clear_bhb_loop+0x60/0xb0 [ 103.243837][ T6203] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.243846][ T6203] RIP: 0033:0x7f68c4b8e929 [ 103.243856][ T6203] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 103.243864][ T6203] RSP: 002b:00007f68c5a8a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 103.243874][ T6203] RAX: ffffffffffffffda RBX: 00007f68c4db6160 RCX: 00007f68c4b8e929 [ 103.243881][ T6203] RDX: 0000200000000280 RSI: 0000000040946400 RDI: 0000000000000005 [ 103.243887][ T6203] RBP: 00007f68c4c10ca1 R08: 0000000000000000 R09: 0000000000000000 [ 103.243893][ T6203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 103.243898][ T6203] R13: 0000000000000001 R14: 00007f68c4db6160 R15: 00007ffc6c981248 [ 103.243913][ T6203] [ 103.243937][ T6203] ---[ end trace ]--- [ 103.511685][ T6203] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 103.518897][ T6203] CPU: 0 UID: 0 PID: 6203 Comm: syz.2.66 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(full) [ 103.530677][ T6203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 103.540715][ T6203] Call Trace: [ 103.543976][ T6203] [ 103.546889][ T6203] dump_stack_lvl+0x99/0x250 [ 103.551461][ T6203] ? __asan_memcpy+0x40/0x70 [ 103.556034][ T6203] ? __pfx_dump_stack_lvl+0x10/0x10 [ 103.561211][ T6203] ? __pfx__printk+0x10/0x10 [ 103.565793][ T6203] panic+0x2db/0x790 [ 103.569671][ T6203] ? __pfx_panic+0x10/0x10 [ 103.574063][ T6203] ? _printk+0xcf/0x120 [ 103.578200][ T6203] ? __pfx__printk+0x10/0x10 [ 103.582766][ T6203] ? __pfx_i8254_io8_cb+0x10/0x10 [ 103.587769][ T6203] ? __ubsan_handle_shift_out_of_bounds+0xf9/0x410 [ 103.594250][ T6203] check_panic_on_warn+0x89/0xb0 [ 103.599174][ T6203] __ubsan_handle_shift_out_of_bounds+0x386/0x410 [ 103.605576][ T6203] pcl812_attach+0x1b9e/0x2300 [ 103.610326][ T6203] ? __pfx_pcl812_attach+0x10/0x10 [ 103.615430][ T6203] comedi_device_attach+0x520/0x670 [ 103.620613][ T6203] comedi_unlocked_ioctl+0x686/0xf40 [ 103.625886][ T6203] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 103.631681][ T6203] ? __pfx_smack_log+0x10/0x10 [ 103.636427][ T6203] ? smk_access+0x14c/0x4e0 [ 103.640914][ T6203] ? smk_tskacc+0x2fc/0x370 [ 103.645415][ T6203] ? smack_file_ioctl+0x24a/0x340 [ 103.650420][ T6203] ? __pfx_smack_file_ioctl+0x10/0x10 [ 103.655777][ T6203] ? __fget_files+0x2a/0x420 [ 103.660349][ T6203] ? __fget_files+0x3a0/0x420 [ 103.665008][ T6203] ? __fget_files+0x2a/0x420 [ 103.669591][ T6203] ? bpf_lsm_file_ioctl+0x9/0x20 [ 103.674509][ T6203] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 103.680297][ T6203] __se_sys_ioctl+0xfc/0x170 [ 103.684868][ T6203] do_syscall_64+0xfa/0x3b0 [ 103.689347][ T6203] ? lockdep_hardirqs_on+0x9c/0x150 [ 103.694522][ T6203] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.700565][ T6203] ? clear_bhb_loop+0x60/0xb0 [ 103.705220][ T6203] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.711089][ T6203] RIP: 0033:0x7f68c4b8e929 [ 103.715500][ T6203] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 103.735111][ T6203] RSP: 002b:00007f68c5a8a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 103.743507][ T6203] RAX: ffffffffffffffda RBX: 00007f68c4db6160 RCX: 00007f68c4b8e929 [ 103.751455][ T6203] RDX: 0000200000000280 RSI: 0000000040946400 RDI: 0000000000000005 [ 103.759405][ T6203] RBP: 00007f68c4c10ca1 R08: 0000000000000000 R09: 0000000000000000 [ 103.767357][ T6203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 103.775308][ T6203] R13: 0000000000000001 R14: 00007f68c4db6160 R15: 00007ffc6c981248 [ 103.783265][ T6203] [ 103.786511][ T6203] Kernel Offset: disabled [ 103.790849][ T6203] Rebooting in 86400 seconds..