last executing test programs: 14.047968322s ago: executing program 3 (id=112): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha256\x00'}, 0x58) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$FBIOPAN_DISPLAY(0xffffffffffffffff, 0x4606, &(0x7f0000000500)={0x300, 0x4b0, 0x1000, 0x300, 0x0, 0x0, 0x0, 0x0, {0x4, 0x7}, {0x5, 0x8, 0x1}, {0xbb24, 0x432d30b4}, {0x80000001, 0x8, 0x1}, 0x2, 0x90, 0x5, 0x5b1, 0x0, 0x1, 0x8, 0x3, 0x6e9d, 0x80000000, 0x400, 0x77ad8000, 0x2, 0x200, 0x2, 0x1}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$tun(r1, &(0x7f0000000440)={@val, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x452c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffdd86}}}}}}}, 0xfdef) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0xb, 0x800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94) ioctl$SNDRV_PCM_IOCTL_RESET(r3, 0x4141, 0x0) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r8, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x7}, '\x00', "5171bb672965593497418688ac68cb126474cd3660dab9e2086e246728d7a040", '\x00\x00=*', "1202000000040030"}, 0x58) setsockopt$inet6_tcp_int(r8, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) connect$inet6(r8, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) accept4(r0, 0x0, 0x0, 0x80000) 12.716358149s ago: executing program 4 (id=117): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x4, &(0x7f0000000100)=@gcm_256={{}, "24747942338921a1", "d830005894bf527ae179a7173985202bbfb61b36f3678de8ea2d0d6616076243", "5615d9f5", "7c5cec21291a43fe"}, 0x38) 12.521578169s ago: executing program 3 (id=118): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) close(0x3) r1 = socket(0x2b, 0x80801, 0x1) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x3ff, @empty, 0xfffffff7}, 0x1c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) 12.307416813s ago: executing program 0 (id=119): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0xdd3) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x2, 0x0, 0x4}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002400)={&(0x7f0000002300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x5, [@var={0x2, 0x0, 0x0, 0xe, 0x2}]}, {0x0, [0x2e, 0x5f, 0x5f]}}, 0x0, 0x2d, 0x0, 0x1, 0x4}, 0x28) socket$kcm(0x10, 0x400000002, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) socket$kcm(0x2, 0x200000000000001, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='memory.stat\x00', 0x26e1, 0x0) socket$packet(0x11, 0x3, 0x300) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r3, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x848c4}, 0x804) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x108850018}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x30, r3, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xa282}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x48b324b21b297972}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=ANY=[@ANYBLOB="e80100000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff020d40f799000000000000000000011400040020010000000000000000000000000001080007400000000010000d800c000380060002004e210000080007400000000da800068004000380080002006401010124000380060001004e230000060001004e230000060001004e210000060002004e24000008000200e0000002340003ec060002004e230000060002004e240000060001004e200000060002004e200000060002004e230000060001004e200000340004000000000000000000000000000000000008000200ac1414aa140005000000000000000000000000000000000008000100e000000284000e801400018008000100ac141409080002000a0101010600034000000000060003400001000006000340000300000c000280050001009f0000000c00028005000100000000002c00018014000300fe80000000000000000000000000002d14000400fc02000000000000000000000000000106000340000300000600034000040000080008d322be8899f58fd0412706a3110b6ac509050fbdad13da3ea4174b0ebbb14f4e2f69"], 0x1e8}}, 0x0) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(0xffffffffffffffff, 0x0, 0x1) fchdir(r5) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) getdents64(r6, &(0x7f0000003340)=""/48, 0x30) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) close(0x3) 12.306131307s ago: executing program 1 (id=120): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r0, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0xa, 0x0, 0x80000000}}, 0x20) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000380), 0x800, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="5c00000015006b05c84e21000ab16d6e230675f802000000000100000017d30461bc24eeb502000000e1940d4531c1c71e6182149a36c23d3b48dfd8cdbf0067b098fa51f60a64c9f408000000e7d6000000d70000b6c0504bb9189d", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000080000000400000001000000c1000000", @ANYRES32=0x1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000540), r4) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0xa, 0x4, 0xfff, 0x7, 0x88, 0xffffffffffffffff, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000e41621eb70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r7}, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000580)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)={0x2c, r5, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}]}, 0x2c}, 0x1, 0x1000000, 0x0, 0x24008850}, 0x4004a040) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x1, 0x9, {}, {0x4, 0x2, 0x7, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000040)=0x1) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000880)={0x1, 0x0, @ioapic={0x0, 0x80, 0xd, 0x0, 0x0, [{0x3f, 0x64, 0x8, '\x00', 0x37}, {0x8, 0x3, 0x1, '\x00', 0x2}, {0x5, 0x7b, 0x0, '\x00', 0x1}, {0x0, 0x2, 0x18, '\x00', 0x4}, {0xd, 0x5, 0x1, '\x00', 0x5}, {0x40, 0xa6, 0x80}, {0xb, 0x9, 0x2, '\x00', 0x1}, {0xe, 0x9f, 0xb, '\x00', 0x9}, {0x2, 0x40, 0x10, '\x00', 0x2}, {0x3, 0x8, 0x7, '\x00', 0x9}, {0x9, 0x7, 0xd9, '\x00', 0x8}, {0x4, 0xab, 0x75, '\x00', 0xff}, {0x0, 0x5, 0x4, '\x00', 0x3}, {0x2, 0x18, 0x0, '\x00', 0x35}, {0x24, 0x6, 0x3, '\x00', 0x8}, {0x8, 0x1, 0xa, '\x00', 0xd}, {0x8, 0x7, 0x2, '\x00', 0x5}, {0x8, 0x2, 0xf7, '\x00', 0xf9}, {0x1, 0x3, 0x70, '\x00', 0x8}, {0x3, 0x2d, 0x7f, '\x00', 0x2}, {0x2e, 0x9, 0x5, '\x00', 0x4}, {0x8, 0x10, 0x5, '\x00', 0x4}, {0xf9, 0x0, 0x0, '\x00', 0x4}, {0x0, 0x9, 0x4, '\x00', 0x4}]}}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) 12.167828078s ago: executing program 4 (id=121): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) 12.166692582s ago: executing program 3 (id=122): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0x202980, 0x0) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000700)={0x80, r2, 0x300, 0x70bd29, 0x25dfdbfc, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bridge_slave_1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}]}, 0x80}, 0x1, 0x0, 0x0, 0x20000000}, 0x40010) uname(&(0x7f0000000180)=""/224) r3 = openat$kvm(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000000000084000040"]) sendmmsg$inet6(r0, &(0x7f0000001ac0)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0xfffffffb, @local, 0x7}, 0x1c, 0x0}}], 0x1, 0x20000800) r6 = socket$netlink(0x10, 0x3, 0x8000000004) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) fcntl$getownex(r0, 0x10, &(0x7f00000004c0)={0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x0, r7, 0x0, &(0x7f0000000540)) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='contention_end\x00', r8}, 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x1, 0x56d, 0x2}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r9}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000004c0), 0x1000, r9}, 0x38) writev(r6, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06ffffff7f000000004001000058000b480400945f64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) 10.22740079s ago: executing program 1 (id=123): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e20, 0x7, @remote, 0x5}}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="2d68d753ad4fa31d850c39fd6a536e2e5b7ab70709a1beb88b0a4b1d12ce576b73faa465e50b9d5088f5d594d73483683be0953af42325c6028d9b93193a8e2b55d29c0601000000a8796007fadc08f3343d57dd207c94a1359fd0c8a9359e321ccd74e6cc05c02b9ab6d2bdb4e808217c637d506793fa780f447d22640d2082603fda8314717906edcae0fb3a68d6f33ba1e8ab7f1b672d02cd2b85e3719d771310ec8b68b7812aa4629e8ec6353e1e086966d981", 0xb5}, {&(0x7f0000000240)="f5e8e5bf6e9ec1fa6e397dfbf611b918fad09c2f39fcf12f193a012a910cbec4cd080635aa6f53285b34f92d0184c79c594dcd3620875d3337e02b6407e3dcbf69d7fd50149319d25887e4f3d723b7e5a6bbe31f0877c8d525764c2b2451749bc097ccbcbd276855a6ef30b7ae30a2d32b6f47a1ea010ecc0f414c4450432cd53c769fb712362d89a580390ad04c47167e1fc44390ca98322527a562757871904c2886c390fb38107ad8e5c8d595be392b229b704ad8acade9e17465bb", 0xbd}, {&(0x7f0000000000)="7c5fab0324a9a038db85d0dc1602220c7f438f17d784415eb5c1286ea5701f0310e011", 0x23}], 0x3, &(0x7f0000000780)=[{0x68, 0x117, 0x800, "271ad6d9409990c7de3366d599e92f7a3b282cf36c243b27dc6dae769c2201f0931cdfe9b45211da74dd998c3f65bbf1f6384d70ec8bfa11ca4e00b22d1d86c8a034f0c77c6af74b3933816894ec4573ee9f9e8a0f1d"}, {0x48, 0x114, 0x65d, "3974ff1ed9bf5a96fc0d6f1bf38506e72af22043b4ab7d959d7e20946e7fbda160916c4ec511738e36a12320db67d0bd36a55cd651"}, {0xa8, 0x104, 0xaf, "313fc96740cc49b9b000eb052c277947f8010a78d5f40592fe7dc94993d931bf56b2c781e186878d20c88449356ac8b54ba7514fc67f030b90c6f91136df878de481ce157af301dd05b0a8125dc9a603d914fabbd0d94bdd18996318daeee1a6b2cad06d7a14bbf3c7ac5a5b005db808f50d0d7793e3f4926f4fbced2f24314e6fcfa28c8f70682686e09f2455a03d614c1591ec"}, {0x38, 0x84, 0x860, "2ce2bd496967e02feab14d83a68d3f907ae4d7a2ea0293394fe302b4d5dda81886f0e65ec68201"}, {0x48, 0x119, 0x1, "9bd5b56c5015083fb723bf03d95a0b5b44de3d8953624b289aa4292cf589eca047f313f755d2fb71ed1288571b6add3c01b5fb61f5c75dd7"}, {0x100, 0x117, 0x81, "009f57bbcf24359e411c1d7756a3f9467a2ebe15960651019a14fda1f83890b729614c37ccea1f6cd6825ae99d9416c22fe0cd3c98c84916b517890107204a4049f383cf6d56ed943f35ff3ca01d4552bd6d64c2e9db6be919b62ca2b6364fa97a2df3cff6cb4b3565b5dfef81dd4eecc5b5ebaf67f153cdd1864b547368a5728b3305242e3c2d247ec002d6ba5a03f96f16a30d41749faf2d9cf482c5090fda76f1738611cc245ce626cf5758183e7783ecc3b48b0b2fa84202e440625e94d463a402cf43fe7a82e74a45bdad796e41abb6d0f935ef7130ef64541d2593dfefb770e814c8cf94f1a85f8038d97a747b"}, {0x48, 0x116, 0x7, "f4ea18ce413e4abdc43901515997664e84638508f114fe70ba4a41d60c5f906260d123d33997c49ac22c9453a7b1920662c3b36bc6c7584d"}, {0xf0, 0x11, 0xfffffffa, "1bac1fb6309fa186f7fedd47f4e1f141d46904f04ade89fb94cf358c403f78119423d8503a37ae55c30d2b40cc7eae843dbdddca42b23c04609301800d072fb501e05a7c8baefce54679e1b1535460ce676a83783bdb1781f8e230fe93bbbda694a6e011087abbe830564661f86d62fdd9c503a1234cce876f852c52f43447eb3c0cd0e7d3a8b0e3af3d7d1811a570cfd3c6ba5a43442725e33bdccffcdc311b36c882d4d9e66ce5668f9494179137da6efc47d0e75a9a624c75213038da640f7c64770ec592fb7115638ebb7fbee4d07794c43f296da6d59a8350cb48"}], 0x410}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000006c0)={{0x12, 0x1, 0x201, 0x6f, 0xa8, 0x8e, 0x40, 0x17a1, 0x128, 0x6bf1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x9, 0x3, 0x40, 0x7, [{{0x9, 0x4, 0x49, 0x1d, 0x0, 0x4b, 0xb4, 0xf4, 0x5}}]}}]}}, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0}) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a03000000000000000000010000000900030073797a32000000000900010073797a300000000054000000060a01040000000000000000010000002c00048028000180080001006e6174001c000280080005400000000408000140000000ffff0000400000000208000b40000000000900010073797a30"], 0xc8}}, 0x0) 10.088311987s ago: executing program 2 (id=124): ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) openat$vcsu(0xffffff9c, &(0x7f0000000180), 0xdf102, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100)='0.::/', 0x0) add_key$user(&(0x7f00000001c0), 0x0, &(0x7f0000000080)="bc", 0x1, 0xfffffffffffffffe) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r0}, 0x10) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0) 10.01398559s ago: executing program 4 (id=125): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000080)={0x2}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000009a0c00008804000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200"/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffefe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_io_uring_setup(0x81f, &(0x7f0000000480)={0x0, 0xbc02, 0x10, 0x0, 0x30f}, &(0x7f00000000c0)=0x0, &(0x7f0000000540)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r3, 0x47bc, 0x0, 0x21, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e300000000000000000000000080003000000000014000600ff"], 0x58}}, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x102) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') fanotify_init(0x200, 0x0) 9.893016589s ago: executing program 2 (id=126): r0 = socket$inet(0x2, 0x4000000805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x200e00, 0x0) bind$pptp(r4, &(0x7f0000000040)={0x18, 0x2, {0x0, @multicast2}}, 0x1e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r5 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x35}}, {0x0, 0xe21, 0x8}}}}}, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000400)={0xf0f071, 0x2}) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000012c0)=@nat={'nat\x00', 0x19, 0x5, 0x146, [0x200000000400, 0x0, 0x0, 0x20000000052e, 0x200000000732], 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0000000000000000000000000000d500000000000000000000000000000000000000000000000000fcffffff01000000050000005400000000f969705f7674693000000000000000000076657468315f746f5f626f6e640000006d6163736563300000000000000000007465616d3000bbff000000ff00bbbbbbbbbbbbff00ff00ffff6e0000006e000000b60000004552524f5200000000000000000000000000000000000000000000000000000020000000000000001bcb6bd7759b08ebd620bbe071216d385a18aca0d5cd59be2680d4c42454000000000000000000000000000000000000000000000000000000000000000000000000000001000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000003000000feffffff00"/326]}, 0x1be) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) userfaultfd(0x1) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x204}) r6 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r6, 0x75fa, 0xe475, 0x0, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f00000000c0)={[{@quota}]}) ioctl$sock_SIOCGIFCONF(r4, 0x8912, &(0x7f0000000180)=@buf={0xb5, &(0x7f0000000300)="3a8a190cd36b6cd6da2735531578ae4914ebb78281de081e5546d9bc9724090a9bbbb9db4eda7b39de75bbc61411b745136d4437365f57ede7ea671b8e62d5d0055cac1f152798659cb516c82a14c5cc053302152d27ab1b5da0160860f872c0bc5ae1ccef9e79bdb6ffe2c5fe13b6baeb9b79c6b2a2bfd821eb423ba3c261dd8d21e991dfae30b739c40968b823d5004ef55ee20be2d53daec38ae0378dc101745449ed32ca1a878135da2d6e6e184d5bf5d3c2ec"}) chdir(&(0x7f0000000100)='./file0\x00') symlink(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') unlink(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 9.891698117s ago: executing program 0 (id=127): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) (async, rerun: 64) set_mempolicy(0x3, &(0x7f0000000000)=0x7, 0x8) (rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async, rerun: 64) r0 = getpid() (rerun: 64) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) (async, rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) (rerun: 64) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000002c0)={0x44, r2, 0xd55319eec59dfa33, 0xfffffffd, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x0, 0x24}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}]}, 0x44}, 0x1, 0x0, 0x0, 0xc804}, 0xc2010) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) (async, rerun: 32) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (rerun: 32) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async, rerun: 64) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r4}, 0x8) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x3e}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x72}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) 8.488205788s ago: executing program 0 (id=128): r0 = open(&(0x7f0000000040)='./bus\x00', 0x40c001, 0x104) fdatasync(r0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x14, 0x2b, 0xb, 0x70bd2c, 0x0, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x801}, 0x0) mremap(&(0x7f0000532000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000190000/0x1000)=nil) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r5}) ioctl$IOMMU_DESTROY$hwpt(r4, 0x3b80, 0x0) ioctl$IOMMU_GET_HW_INFO(r4, 0x3b8a, 0x0) close(r4) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f00000000c0)={{0x80, 0x1}, 0x1, 0x20000, 0x6, {0x5, 0x6}, 0x1, 0x1}) r6 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r6, 0x84, 0x71, &(0x7f0000000000), 0x8) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e22, @remote}, 0x10) sendmsg$inet_sctp(r6, &(0x7f0000000d80)={&(0x7f0000000800)=@in={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000d00)=[{&(0x7f0000000840)='6', 0xffe0}], 0x1, 0x0, 0x0, 0x20000080}, 0x10) 7.154113113s ago: executing program 0 (id=129): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0x202, 0x400) fanotify_mark(r1, 0x1, 0x4800003e, r0, 0x0) r2 = syz_io_uring_setup(0xa0, &(0x7f0000000640)={0x0, 0x105cc6, 0x0, 0x0, 0x207}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000001c0)=[{&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f00000000c0)=""/100, 0x64}, {0x0}, {&(0x7f00000002c0)=""/108, 0x6c}], 0x4}) r5 = epoll_create1(0x80000) r6 = socket$unix(0x1, 0x5, 0x0) setsockopt$sock_int(r6, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) r7 = syz_io_uring_setup(0x837, &(0x7f0000000340)={0x0, 0xf9ae, 0x80, 0x2, 0x3cf}, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000100)=@IORING_OP_TIMEOUT={0xb, 0x41, 0x0, 0x0, 0x9, &(0x7f00000000c0), 0x1, 0x4}) io_uring_enter(r7, 0x3516, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) getrandom(&(0x7f0000000000)=""/47, 0x2f, 0x3) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000100)={0xa0028000}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) 6.933828228s ago: executing program 2 (id=130): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) r0 = userfaultfd(0x1) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) 6.792257013s ago: executing program 1 (id=131): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x4, &(0x7f0000000100)=@gcm_256={{}, "24747942338921a1", "d830005894bf527ae179a7173985202bbfb61b36f3678de8ea2d0d6616076243", "5615d9f5", "7c5cec21291a43fe"}, 0x38) 6.625174815s ago: executing program 4 (id=132): r0 = landlock_create_ruleset(&(0x7f0000000000)={0xe01, 0x2, 0x1}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x0) r1 = landlock_create_ruleset(&(0x7f0000000140)={0x2000}, 0x10, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0x80800, 0x12d) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000340)={0x2000, r2}, 0x0) ioctl$FIBMAP(r2, 0x1, &(0x7f00000000c0)=0xffff) landlock_restrict_self(r1, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2) 6.367578826s ago: executing program 1 (id=133): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000140)={0x4, 0x3, 0x6, 0x10001}, 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x0, 0x20}, 0xc) r1 = dup(r0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000040)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x1}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111, 0x6}}, 0x20) write$P9_RXATTRWALK(r1, &(0x7f0000000000)={0xf, 0x1f, 0x2, 0x6}, 0xf) shutdown(r1, 0x1) (fail_nth: 2) 6.343952515s ago: executing program 2 (id=134): r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000080)=@fragment={0xb6, 0x0, 0x92, 0x0, 0x0, 0x1b, 0x65}, 0x8) sendto$inet6(r0, 0x0, 0x0, 0x20044080, &(0x7f0000000040)={0xa, 0xcaa1, 0xffffff7c, @mcast1, 0xd}, 0x1c) 6.24683126s ago: executing program 4 (id=135): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = accept4$bt_l2cap(r0, 0x0, &(0x7f0000000140), 0x80000) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x1a, 0x80000, 0x2) connect$netlink(r3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'macsec0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c0000001300050000000000005cc4", @ANYRES32=r8, @ANYBLOB="00000000000000000c001a800800058004000780"], 0x2c}}, 0x0) connect$bt_l2cap(r1, &(0x7f00000000c0)={0x1f, 0x8ef, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040), 0x4) mount$tmpfs(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000f80), 0x400, &(0x7f0000000080)=ANY=[@ANYBLOB='mpol=bind:N-', @ANYRESOCT]) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r6, 0x8948, &(0x7f0000000040)={'wg1\x00', @ifru_data=&(0x7f0000000280)="c2edef919c45f05b0516151848dec341d63aa2a35db5e2191a9ba8dbe9eea33e"}) alarm(0x9) alarm(0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000740)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYBLOB="ed4d00000000000000003100000008000300", @ANYBLOB="0b6424d9a035f5aa7360c16bc6b798774118e6c484d2", @ANYBLOB="6c7b913724a34c5a60184ecdce8111b4cf977b01ccea15d600007a062d70b97aa7b622dda09d2fced41a8144447f885a69b6af0edf"], 0x1c}}, 0x0) syz_open_dev$rtc(&(0x7f0000000100), 0x3, 0x10200) migrate_pages(r4, 0x3068243e, &(0x7f0000000180)=0x8000000000000000, &(0x7f00000001c0)=0xa) 6.246180447s ago: executing program 3 (id=136): ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) openat$vcsu(0xffffff9c, &(0x7f0000000180), 0xdf102, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100)='0.::/', 0x0) add_key$user(&(0x7f00000001c0), 0x0, &(0x7f0000000080)="bc", 0x1, 0xfffffffffffffffe) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r0}, 0x10) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0) 6.095233084s ago: executing program 2 (id=137): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000140)={0x4, 0x3, 0x6, 0x10001}, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="880000001c000b07000000000000002502000000", @ANYRES32=r3, @ANYBLOB="8000200514000100fe88000000000000000000000000000108000f0001"], 0x88}}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x4e21, @loopback}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) semop(0x0, &(0x7f0000000540)=[{0x3, 0x43a}], 0x1) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000180)={0xffffffffffffffff}, 0x111, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r4, &(0x7f0000000300)={0x4, 0x8, 0xfa00, {r5, 0x7f}}, 0x10) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x0, 0x20}, 0xc) r6 = dup(r0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r6, &(0x7f0000000040)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x1}}, 0x10) r7 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_G_PARM(r7, 0xc0cc5615, &(0x7f0000000380)={0x8, @capture={0x0, 0x0, {0x4, 0x8001}, 0x4}}) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111, 0x6}}, 0x20) ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, &(0x7f0000000000)) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="00000000000000009811cf0246afdda87b441f00", @ANYRESOCT=r6, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r9 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r9, 0x1, 0x25, &(0x7f0000000000)=0x49d0, 0x4) sendto$inet6(r9, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @empty}, 0x1c) recvmmsg(r9, &(0x7f00000066c0)=[{{0x0, 0x51, 0x0, 0x0, &(0x7f0000001fc0)=""/148, 0xfffffffffffffc89}, 0x6}], 0x1, 0x2004, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0xf, &(0x7f0000000480)=ANY=[@ANYRES8=r3, @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bc0900000000000035090100000000009500000000000000ce9000000000000056080000010000008500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$P9_RXATTRWALK(r6, &(0x7f0000000000)={0xf, 0x1f, 0x2, 0x6}, 0xf) shutdown(r6, 0x1) 5.997785828s ago: executing program 0 (id=138): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000080)={0x2}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000009a0c00008804000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200"/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffefe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_io_uring_setup(0x81f, &(0x7f0000000480)={0x0, 0xbc02, 0x10, 0x0, 0x30f}, &(0x7f00000000c0)=0x0, &(0x7f0000000540)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r3, 0x47bc, 0x0, 0x21, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e300000000000000000000000080003000000000014000600ff"], 0x58}}, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x102) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) 5.836059408s ago: executing program 1 (id=139): r0 = open(&(0x7f0000000040)='./bus\x00', 0x40c001, 0x104) fdatasync(r0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x14, 0x2b, 0xb, 0x70bd2c, 0x0, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x801}, 0x0) mremap(&(0x7f0000532000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000190000/0x1000)=nil) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r5}) ioctl$IOMMU_DESTROY$hwpt(r4, 0x3b80, 0x0) ioctl$IOMMU_GET_HW_INFO(r4, 0x3b8a, 0x0) close(r4) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f00000000c0)={{0x80, 0x1}, 0x1, 0x20000, 0x6, {0x5, 0x6}, 0x1, 0x1}) r6 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r6, 0x84, 0x71, &(0x7f0000000000), 0x8) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e22, @remote}, 0x10) sendmsg$inet_sctp(r6, &(0x7f0000000d80)={&(0x7f0000000800)=@in={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000d00)=[{&(0x7f0000000840)='6', 0xffe0}], 0x1, 0x0, 0x0, 0x20000080}, 0x10) 5.835513503s ago: executing program 3 (id=140): r0 = socket$inet(0x2, 0x4000000805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x200e00, 0x0) bind$pptp(r4, &(0x7f0000000040)={0x18, 0x2, {0x0, @multicast2}}, 0x1e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r5 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x35}}, {0x0, 0xe21, 0x8}}}}}, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000400)={0xf0f071, 0x2}) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000012c0)=@nat={'nat\x00', 0x19, 0x5, 0x146, [0x200000000400, 0x0, 0x0, 0x20000000052e, 0x200000000732], 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="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"/326]}, 0x1be) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) userfaultfd(0x1) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x204}) r6 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r6, 0x75fa, 0xe475, 0x0, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f00000000c0)={[{@quota}]}) ioctl$sock_SIOCGIFCONF(r4, 0x8912, &(0x7f0000000180)=@buf={0xb5, &(0x7f0000000300)="3a8a190cd36b6cd6da2735531578ae4914ebb78281de081e5546d9bc9724090a9bbbb9db4eda7b39de75bbc61411b745136d4437365f57ede7ea671b8e62d5d0055cac1f152798659cb516c82a14c5cc053302152d27ab1b5da0160860f872c0bc5ae1ccef9e79bdb6ffe2c5fe13b6baeb9b79c6b2a2bfd821eb423ba3c261dd8d21e991dfae30b739c40968b823d5004ef55ee20be2d53daec38ae0378dc101745449ed32ca1a878135da2d6e6e184d5bf5d3c2ec"}) chdir(&(0x7f0000000100)='./file0\x00') symlink(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') unlink(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 4.913446034s ago: executing program 4 (id=141): r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000019980)=@raw={'raw\x00', 0x8, 0x3, 0x308, 0x0, 0x11, 0x148, 0x160, 0x0, 0x270, 0x2a8, 0x2a8, 0x270, 0x2a8, 0x3, 0x0, {[{{@ip={@private=0xa010100, @multicast2, 0x9e8489871a29d3b4, 0x0, 'veth1_to_team\x00', 'veth1_virt_wifi\x00', {}, {0xff}, 0x84, 0x1, 0x50}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x20000000, 0x6, 0x7}}}, @common=@inet=@multiport={{0x50}, {0x2, 0x4, [0x4e20, 0x4e22, 0x4e23, 0x4e21, 0x4e21, 0x4e20, 0x4e21, 0x4e22, 0x4e24, 0x4e22, 0x4e24, 0x4e23, 0x4e20, 0x4e22, 0x4e24], [0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1], 0x1}}]}, @unspec=@CT0={0x48}}, {{@ip={@local, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'pim6reg0\x00', {}, {}, 0x0, 0x0, 0x7}, 0x0, 0xe0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@limit={{0x48}, {0x9, 0xffffffff, 0x8, 0x316b, 0x9, 0x8, 0xaa}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x368) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="4400000010000304"], 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="400104000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 356.380084ms ago: executing program 1 (id=142): syz_io_uring_setup(0x499, &(0x7f0000000540)={0x0, 0xe142, 0x40, 0x0, 0x3b6}, &(0x7f0000000340), 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x1b1dc1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000400)={0x100005, 0x7ff, 0x0, 'queue1\x00'}) getdents(0xffffffffffffff9c, &(0x7f0000000140)=""/106, 0x6a) write$sndseq(r0, &(0x7f0000000300)=[{0x84, 0x77, 0x0, 0x0, @tick, {0xfd}, {0x7}, @raw32={[0x2, 0x0, 0x8000000]}}, {0x2, 0x0, 0x5, 0x83, @tick, {0xfd}, {}, @note={0x81}}, {0x6, 0x3, 0x9, 0xff, @tick=0x1, {0x10, 0x5}, {0xc, 0x2}, @control={0x3, 0xa, 0x7fff}}, {0x8, 0x3, 0x6, 0x4, @time={0x3, 0x6}, {0xbb, 0x3}, {0xdb}, @result={0x5, 0x9}}], 0x70) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440), 0x10) listen(r1, 0x6d5) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="2800000014001901000000000000000228"], 0x28}}, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) r7 = socket$vsock_stream(0x28, 0x1, 0x0) writev(r7, &(0x7f0000000000)=[{&(0x7f0000000480)=']', 0x1}], 0x1) setsockopt$inet_int(r6, 0x0, 0x13, &(0x7f00000009c0)=0x1, 0x4) r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) chdir(&(0x7f00000004c0)='./file0\x00') sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r5, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, 0x3, 0x2, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24008881}, 0x8000) sendmmsg$sock(r8, &(0x7f0000001640)=[{{&(0x7f0000000100)=@l2tp={0x2, 0x0, @broadcast, 0x3}, 0x80, 0x0}}, {{&(0x7f0000000700)=@in6={0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, '\x00', 0x18}, 0x60}, 0x80, 0x0}}], 0x2, 0x48094) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r9, &(0x7f0000000000), 0xffffff6a) sendfile(r8, r9, 0x0, 0xffffffff000) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/tcp_window_scaling\x00', 0x1, 0x0) ioctl$SIOCAX25OPTRT(r9, 0x89e7, &(0x7f00000001c0)={@null, @bcast, 0x2, 0x44}) 156.489072ms ago: executing program 3 (id=143): syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f60c01a83d88008"], 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x7, 0x0, 0x8, [{{0x9, 0x4, 0x0, 0x6, 0x1, 0x7, 0x1, 0x2, 0xe6, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0x6, 0x0, 0x5}}}}}]}}]}}, &(0x7f00000001c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x200, 0x5, 0x0, 0x8, 0x8, 0x8}, 0x19, &(0x7f0000000100)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x81, "f7d6e039f82eb876cd9030ceeed10688"}]}, 0x2, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x430}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x380a}}]}) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) syz_clone3(&(0x7f0000000480)={0x42200280, 0x0, 0x0, 0x0, {0x1d}, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) syz_io_uring_complete(0x0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x4a243) io_setup(0x79, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$inet6_tcp_buf(r1, 0x6, 0xb, 0x0, &(0x7f0000003d80)) close(r0) 152.118874ms ago: executing program 0 (id=144): unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x8031, 0xffffffffffffffff, 0x1000) r0 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) r1 = socket$tipc(0x1e, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) readv(r2, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x10}], 0x4) socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000040)={0x0, 'syzkaller1\x00', {0x4}, 0x1}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) writev(r0, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) 0s ago: executing program 2 (id=145): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000929961e67c0fa20afc0b7effffff95000000ff00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x2000005, 0xfffffffffffffffe, 0xa, 0xe695, 0x0, 0x0, 0xe, 0x6c, 0xfffffffffffffffe, 0x4, 0xfe, 0x0, 0x6, 0x556, 0xfffffffffffffffe, 0xffff], 0x0, 0x2ac0c2}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1e000000ef1e0000070000000500000000000000", @ANYRES32, @ANYBLOB="7f05000000000000fcff00000000000000000000ded6c5abe3abc77b8626b24948ecdbfc31f738cab61bb1af9907a521f21f9a371e9ec608275f3490faff00252ce463007ed87820d99db39f2d6131d29d0a295b53bdfb0203d8f8f4931fd58519aac6b1af813719bb1a8251333b4e4d9523f773ce0ffd207e791e349b10811c77228be22fecbd091350d5e7637d0f43461d3f2c88285301f646fda4a8d0ae86e2bf014fe6265f0df5bc5449a03da95cb135ef662b8497b1dd0046f31dc5709bd6dac41df1ff5920fcc93793c71d35ffa4c0ffbb2bfe86b5cb41ebe7fd9a3680b41c314a7a10dd51d63d32c340314c409e10b4bdc16b02d9", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000020000000500"/28], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000e00)={r3, &(0x7f0000000d00), 0x0}, 0x20) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x0, 0x74, 0x0, 0x0) lsm_get_self_attr(0x68, 0x0, &(0x7f0000000580), 0x1) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x70, 0x14, 0xf0b, 0xfffffffe, 0x4, {0x2, 0x0, 0x0, 0x0, {0x1, 0x17}, {0x10, 0x5}, {0x0, 0x6}}, [@TCA_STAB={0x4c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x15, 0x5, 0x4, 0x79, 0x1, 0x0, 0x200}}, {0x4}}, {{0x1c, 0x1, {0xa, 0x5, 0x13, 0x487, 0x1, 0xae8e, 0xfab8, 0x3}}, {0xa, 0x2, [0x1, 0x2, 0x0]}}]}]}, 0x70}}, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000001802000018000000020000000000000001000013020000000100000000000700000000000000"], 0x0, 0x32, 0x0, 0x9, 0xffffffff}, 0x28) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r10, 0xc008ae88, &(0x7f0000000300)=ANY=[@ANYBLOB="020000000000000093000040"]) r11 = syz_usb_connect(0x0, 0x24, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io$uac1(r11, 0x0, &(0x7f0000000040)={0x44, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r11, 0x0, 0x0) syz_usb_control_io$printer(r11, 0x0, 0x0) syz_usb_control_io(r11, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000240)=ANY=[@ANYBLOB="500f03000000c1a49212b3e8e2a63c1d1d710c618bcb6a1cac7a441009abf0c52eef4aa6a732f553000000000000cc2ff320f8c2af616426d7fdb91833938597d73ef8000000000000000034c9000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r11, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.236' (ED25519) to the list of known hosts. [ 85.367342][ T5823] cgroup: Unknown subsys name 'net' [ 85.545211][ T5823] cgroup: Unknown subsys name 'cpuset' [ 85.555053][ T5823] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 87.348855][ T5823] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 91.661357][ T5843] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 91.681625][ T5843] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 91.701344][ T5843] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 91.711158][ T5843] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 91.715749][ T5853] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 91.726535][ T5843] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 91.726895][ T5853] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 91.733682][ T5848] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 91.741714][ T5853] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 91.750029][ T5843] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 91.756152][ T5853] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 91.766945][ T5843] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 91.770907][ T5853] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 91.776888][ T5843] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 91.790706][ T5853] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 91.791166][ T5155] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 91.798931][ T5853] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 91.807968][ T5843] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 91.813696][ T5853] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 91.823574][ T5843] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 91.828012][ T5853] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 91.847898][ T5843] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 91.856201][ T5853] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 91.863171][ T5843] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 91.872096][ T927] cfg80211: failed to load regulatory.db [ 91.880821][ T5845] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 92.496686][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 92.709940][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 92.722667][ T5849] chnl_net:caif_netlink_parms(): no params data found [ 92.736132][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 92.765244][ T5846] chnl_net:caif_netlink_parms(): no params data found [ 92.888948][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.896540][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.904203][ T5837] bridge_slave_0: entered allmulticast mode [ 92.914279][ T5837] bridge_slave_0: entered promiscuous mode [ 92.971868][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.979046][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.986596][ T5837] bridge_slave_1: entered allmulticast mode [ 92.993889][ T5837] bridge_slave_1: entered promiscuous mode [ 93.161051][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.168283][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.175804][ T5849] bridge_slave_0: entered allmulticast mode [ 93.183402][ T5849] bridge_slave_0: entered promiscuous mode [ 93.194807][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.205062][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.212818][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.220027][ T5849] bridge_slave_1: entered allmulticast mode [ 93.227895][ T5849] bridge_slave_1: entered promiscuous mode [ 93.265290][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.272647][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.279847][ T5835] bridge_slave_0: entered allmulticast mode [ 93.287403][ T5835] bridge_slave_0: entered promiscuous mode [ 93.297431][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.338659][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.348472][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.355869][ T5834] bridge_slave_0: entered allmulticast mode [ 93.363998][ T5834] bridge_slave_0: entered promiscuous mode [ 93.372654][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.379774][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.387469][ T5834] bridge_slave_1: entered allmulticast mode [ 93.395316][ T5834] bridge_slave_1: entered promiscuous mode [ 93.403242][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.410377][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.417914][ T5846] bridge_slave_0: entered allmulticast mode [ 93.425494][ T5846] bridge_slave_0: entered promiscuous mode [ 93.433413][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.441178][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.448409][ T5835] bridge_slave_1: entered allmulticast mode [ 93.455922][ T5835] bridge_slave_1: entered promiscuous mode [ 93.479977][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.493281][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.519389][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.527664][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.538379][ T5846] bridge_slave_1: entered allmulticast mode [ 93.547648][ T5846] bridge_slave_1: entered promiscuous mode [ 93.648291][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.689472][ T5837] team0: Port device team_slave_0 added [ 93.699712][ T5837] team0: Port device team_slave_1 added [ 93.708479][ T5849] team0: Port device team_slave_0 added [ 93.717754][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.729725][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.742414][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.767574][ T5849] team0: Port device team_slave_1 added [ 93.817592][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.829466][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.841409][ T5852] Bluetooth: hci0: command tx timeout [ 93.874751][ T5834] team0: Port device team_slave_0 added [ 93.885275][ T5834] team0: Port device team_slave_1 added [ 93.918964][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.926579][ T5852] Bluetooth: hci1: command tx timeout [ 93.926728][ T5852] Bluetooth: hci2: command tx timeout [ 93.930709][ T5852] Bluetooth: hci4: command tx timeout [ 93.932709][ T5843] Bluetooth: hci3: command tx timeout [ 93.940616][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.975491][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.992002][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.998999][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.027058][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.074068][ T5846] team0: Port device team_slave_0 added [ 94.099640][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.107983][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.134357][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.146069][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.153738][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.179830][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.212414][ T5846] team0: Port device team_slave_1 added [ 94.218978][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.228183][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.255000][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.269281][ T5835] team0: Port device team_slave_0 added [ 94.279794][ T5835] team0: Port device team_slave_1 added [ 94.323629][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.331222][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.357447][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.424071][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.431825][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.458611][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.479098][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.486424][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.512893][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.551807][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.558813][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.584903][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.621012][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.628104][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.654369][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.672241][ T5837] hsr_slave_0: entered promiscuous mode [ 94.678862][ T5837] hsr_slave_1: entered promiscuous mode [ 94.691968][ T5849] hsr_slave_0: entered promiscuous mode [ 94.698379][ T5849] hsr_slave_1: entered promiscuous mode [ 94.705438][ T5849] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 94.713616][ T5849] Cannot create hsr debugfs directory [ 94.811862][ T5834] hsr_slave_0: entered promiscuous mode [ 94.818598][ T5834] hsr_slave_1: entered promiscuous mode [ 94.825534][ T5834] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 94.833585][ T5834] Cannot create hsr debugfs directory [ 94.865791][ T5846] hsr_slave_0: entered promiscuous mode [ 94.873294][ T5846] hsr_slave_1: entered promiscuous mode [ 94.879453][ T5846] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 94.888121][ T5846] Cannot create hsr debugfs directory [ 95.024764][ T5835] hsr_slave_0: entered promiscuous mode [ 95.032412][ T5835] hsr_slave_1: entered promiscuous mode [ 95.040110][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 95.051069][ T5835] Cannot create hsr debugfs directory [ 95.564076][ T5837] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 95.578669][ T5837] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 95.604972][ T5837] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 95.634971][ T5837] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 95.669955][ T5846] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 95.696491][ T5846] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 95.716357][ T5846] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 95.737468][ T5846] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 95.803339][ T5849] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 95.834049][ T5849] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 95.848214][ T5849] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 95.860015][ T5849] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 95.921578][ T5843] Bluetooth: hci0: command tx timeout [ 95.999494][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.006410][ T5843] Bluetooth: hci4: command tx timeout [ 96.007174][ T5852] Bluetooth: hci2: command tx timeout [ 96.013830][ T5845] Bluetooth: hci1: command tx timeout [ 96.017354][ T5853] Bluetooth: hci3: command tx timeout [ 96.041041][ T5834] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 96.059783][ T5834] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 96.092831][ T5834] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 96.103585][ T5834] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 96.205963][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.213261][ T5835] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 96.249425][ T5835] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 96.272024][ T5835] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 96.303735][ T5835] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 96.318540][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.325938][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.365901][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.373139][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.405303][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.457472][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.502104][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.532331][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.539471][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.574444][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.581625][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.595059][ T5849] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.624544][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.631770][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.679899][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.687478][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.816495][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.919208][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.946814][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.954119][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.986825][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.994062][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.065219][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.169712][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.209558][ T5834] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 97.276709][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.355182][ T4585] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.362429][ T4585] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.452534][ T4585] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.459738][ T4585] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.528407][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.576725][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.810398][ T5846] veth0_vlan: entered promiscuous mode [ 97.828634][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.841506][ T5849] veth0_vlan: entered promiscuous mode [ 97.875466][ T5846] veth1_vlan: entered promiscuous mode [ 97.890089][ T5849] veth1_vlan: entered promiscuous mode [ 97.979543][ T5846] veth0_macvtap: entered promiscuous mode [ 98.005492][ T5853] Bluetooth: hci0: command tx timeout [ 98.041752][ T5849] veth0_macvtap: entered promiscuous mode [ 98.057604][ T5846] veth1_macvtap: entered promiscuous mode [ 98.066516][ T5837] veth0_vlan: entered promiscuous mode [ 98.085307][ T5853] Bluetooth: hci3: command tx timeout [ 98.091549][ T5852] Bluetooth: hci2: command tx timeout [ 98.094670][ T5845] Bluetooth: hci1: command tx timeout [ 98.096970][ T5852] Bluetooth: hci4: command tx timeout [ 98.110169][ T5849] veth1_macvtap: entered promiscuous mode [ 98.126468][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.147865][ T5837] veth1_vlan: entered promiscuous mode [ 98.165269][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.174254][ T5834] veth0_vlan: entered promiscuous mode [ 98.194384][ T5846] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.206269][ T5846] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.215940][ T5846] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.225852][ T5846] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.259125][ T5834] veth1_vlan: entered promiscuous mode [ 98.269821][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.308168][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.363460][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.399182][ T5849] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.408236][ T5849] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.420933][ T5849] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.430187][ T5849] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.468596][ T5837] veth0_macvtap: entered promiscuous mode [ 98.505409][ T5834] veth0_macvtap: entered promiscuous mode [ 98.515692][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.526753][ T5837] veth1_macvtap: entered promiscuous mode [ 98.529324][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.552109][ T5834] veth1_macvtap: entered promiscuous mode [ 98.576726][ T5835] veth0_vlan: entered promiscuous mode [ 98.645620][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.650015][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.669185][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.686668][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.713871][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.735766][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.749577][ T5835] veth1_vlan: entered promiscuous mode [ 98.783631][ T5834] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.795878][ T5834] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.808215][ T5834] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.817418][ T5834] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.838774][ T5846] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 98.847819][ T5837] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.864890][ T5837] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.874363][ T5837] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.884439][ T5837] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.918433][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.938649][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.079343][ T5835] veth0_macvtap: entered promiscuous mode [ 99.096233][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.105215][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.148575][ T4585] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.156757][ T4585] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.176444][ T5835] veth1_macvtap: entered promiscuous mode [ 99.257787][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.292056][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.303739][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.366564][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.535718][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.547093][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.610750][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 99.620571][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 99.630303][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 99.639004][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 99.648567][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 99.718892][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 99.800993][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 99.910573][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 99.924882][ T5835] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.949499][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 99.968299][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 100.080618][ T5853] Bluetooth: hci0: command tx timeout [ 100.161727][ T5852] Bluetooth: hci4: command tx timeout [ 100.167338][ T5853] Bluetooth: hci3: command tx timeout [ 100.170757][ T5845] Bluetooth: hci1: command tx timeout [ 100.173203][ T5852] Bluetooth: hci2: command tx timeout [ 100.255483][ T5835] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.264527][ T5835] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.273324][ T5835] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.355232][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.383034][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.461337][ T5972] ptrace attach of "./syz-executor exec"[5849] was attempted by "./syz-executor exec"[5972] [ 101.550891][ T5986] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 101.583959][ T4585] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.610352][ T4585] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.619360][ T5920] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 101.779189][ T5920] usb 1-1: device descriptor read/64, error -71 [ 101.807088][ T4585] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.841503][ T4585] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.030412][ T5994] netlink: 68 bytes leftover after parsing attributes in process `syz.3.11'. [ 102.077249][ T5920] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 102.371789][ T5999] Bluetooth: hci5: Frame reassembly failed (-90) [ 102.860617][ T5920] usb 1-1: device descriptor read/64, error -71 [ 103.068596][ T5920] usb usb1-port1: attempt power cycle [ 103.227042][ T6007] Illegal XDP return value 4294967274 on prog (id 5) dev syz_tun, expect packet loss! [ 103.496267][ T5920] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 103.592881][ T6012] program syz.1.2 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 103.654978][ T6012] program syz.1.2 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 103.668687][ T6012] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 103.741312][ T6012] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'. [ 103.935060][ T5920] usb 1-1: device descriptor read/8, error -71 [ 104.305094][ T6022] comedi: No check for data length of config insn id 1023 is implemented [ 104.321939][ T6022] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 104.337400][ T6022] comedi: Assuming n=29602 is correct [ 104.400872][ T5853] Bluetooth: hci5: command 0x1003 tx timeout [ 104.407742][ T5852] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 104.480628][ T5920] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 104.500749][ T5934] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 104.541554][ T5920] usb 1-1: Using ep0 maxpacket: 8 [ 104.563742][ T5920] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 104.575274][ T5920] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 104.590555][ T5920] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 104.600418][ T5920] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 104.612738][ T5920] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 104.623502][ T5920] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 104.669403][ T5920] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.682340][ T5934] usb 2-1: Using ep0 maxpacket: 8 [ 104.704167][ T5934] usb 2-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 104.734156][ T5934] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.741123][ T6026] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 104.754505][ T5920] usb 1-1: config 0 descriptor?? [ 104.778758][ T5934] usb 2-1: Product: syz [ 104.796073][ T6015] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 104.818006][ T5934] usb 2-1: Manufacturer: syz [ 104.827146][ T6026] syz.4.20 uses obsolete (PF_INET,SOCK_PACKET) [ 104.833574][ T5934] usb 2-1: SerialNumber: syz [ 104.844206][ T5934] usb 2-1: config 0 descriptor?? [ 104.894363][ T5934] gspca_main: sq930x-2.14.0 probing 2770:930c [ 106.018122][ T5934] gspca_sq930x: ucbus_write failed -71 [ 106.241460][ T5934] gspca_sq930x: Sensor ov9630 not yet treated [ 106.262401][ T6042] netlink: 68 bytes leftover after parsing attributes in process `syz.4.24'. [ 106.273628][ T5934] sq930x 2-1:0.0: probe with driver sq930x failed with error -22 [ 106.961051][ T5852] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 107.123815][ T5852] Bluetooth: hci4: command 0x0405 tx timeout [ 107.544235][ T5934] usb 2-1: USB disconnect, device number 2 [ 107.722902][ T6050] netlink: 68 bytes leftover after parsing attributes in process `syz.4.27'. [ 108.890650][ T5934] usb 1-1: USB disconnect, device number 5 [ 109.034046][ T6058] xt_socket: unknown flags 0x8 [ 109.568361][ T10] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 109.771468][ T10] usb 2-1: New USB device found, idVendor=0a2c, idProduct=0008, bcdDevice=e8.cf [ 109.800702][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.814211][ T10] usb 2-1: Product: syz [ 109.824947][ T10] usb 2-1: Manufacturer: syz [ 109.829717][ T10] usb 2-1: SerialNumber: syz [ 109.909937][ T10] usb 2-1: config 0 descriptor?? [ 110.047730][ T10] cypress_cy7c63 2-1:0.0: Cypress CY7C63xxx device now attached [ 110.177753][ T5920] usb 2-1: USB disconnect, device number 3 [ 110.233132][ T5920] cypress_cy7c63 2-1:0.0: Cypress CY7C63xxx device now disconnected [ 111.588432][ T6088] netlink: 40 bytes leftover after parsing attributes in process `syz.2.36'. [ 112.128180][ T5842] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 112.159560][ T6084] netlink: 68 bytes leftover after parsing attributes in process `syz.1.37'. [ 112.328423][ T5842] usb 5-1: Using ep0 maxpacket: 8 [ 112.448734][ T5842] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 112.547569][ T5842] usb 5-1: config 0 has no interface number 0 [ 112.646454][ T5842] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 112.748365][ T5842] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 112.868477][ T5842] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 112.959504][ T5842] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 113.078072][ T5842] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 113.171286][ T5842] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.711939][ T5842] usb 5-1: config 0 descriptor?? [ 114.294284][ T5842] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 114.550376][ T6105] tmpfs: Bad value for 'mpol' [ 115.152974][ T10] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 115.196651][ T24] usb 5-1: USB disconnect, device number 2 [ 115.210118][ T24] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 115.504071][ T10] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 115.540733][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.590233][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.607187][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 115.641077][ T10] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 115.650206][ T10] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 115.834655][ T10] usb 4-1: Manufacturer: syz [ 116.476887][ T10] usb 4-1: config 0 descriptor?? [ 116.770794][ T10] usb 4-1: can't set config #0, error -71 [ 116.849549][ T10] usb 4-1: USB disconnect, device number 2 [ 117.165111][ T6128] tmpfs: Cannot change global quota limit on remount [ 117.401447][ T6133] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 117.446662][ T6133] team0: Failed to send options change via netlink (err -105) [ 117.476304][ T6133] team0: Port device batadv1 added [ 117.714708][ T6147] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 117.849363][ T10] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 118.100603][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 118.531910][ T10] usb 3-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 118.544204][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.567805][ T10] usb 3-1: Product: syz [ 118.579172][ T10] usb 3-1: Manufacturer: syz [ 118.643984][ T10] usb 3-1: SerialNumber: syz [ 118.700573][ T10] usb 3-1: config 0 descriptor?? [ 118.733162][ T10] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 120.202860][ T6171] trusted_key: encrypted_key: key user:syz not found [ 120.874218][ T10] gspca_ov534_9: reg_w failed -71 [ 121.231040][ T10] gspca_ov534_9: Unknown sensor 0000 [ 121.235387][ T10] ov534_9 3-1:0.0: probe with driver ov534_9 failed with error -22 [ 121.514530][ T6176] ieee802154 phy0 wpan0: encryption failed: -22 [ 121.540819][ T10] usb 3-1: USB disconnect, device number 2 [ 122.636307][ T6196] fuse: Bad value for 'rootmode' [ 122.649009][ T6196] netlink: 'syz.3.63': attribute type 1 has an invalid length. [ 124.888068][ T6212] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 126.008082][ T6225] capability: warning: `syz.2.73' uses 32-bit capabilities (legacy support in use) [ 126.026374][ T6225] program syz.2.73 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 126.286832][ T6234] tracefs: Invalid gid '00000000000037777777777' [ 126.632243][ T6244] trusted_key: encrypted_key: key user:syz not found [ 127.484509][ T6251] netlink: 28 bytes leftover after parsing attributes in process `syz.0.70'. [ 130.036419][ T6264] 9pnet_virtio: no channels available for device /dev/md0 [ 130.204787][ T6267] netlink: 'syz.1.82': attribute type 1 has an invalid length. [ 130.815544][ T6269] sp0: Synchronizing with TNC [ 131.041748][ T6279] tmpfs: Bad value for 'mpol' [ 131.223833][ T6278] netlink: 4 bytes leftover after parsing attributes in process `syz.1.86'. [ 132.262487][ T6298] netlink: 148 bytes leftover after parsing attributes in process `syz.1.89'. [ 132.271608][ T6298] netlink: 4 bytes leftover after parsing attributes in process `syz.1.89'. [ 132.913239][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.919737][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.135686][ T6292] delete_channel: no stack [ 134.581497][ T6317] netlink: 8 bytes leftover after parsing attributes in process `syz.1.95'. [ 134.596530][ T6317] IPVS: Error joining to the multicast group [ 136.740539][ T6328] tmpfs: Bad value for 'mpol' [ 137.456236][ T6333] trusted_key: encrypted_key: key user:syz not found [ 137.651278][ T6337] netlink: 31 bytes leftover after parsing attributes in process `syz.1.102'. [ 138.156935][ T6339] can: request_module (can-proto-0) failed. [ 138.328768][ T6349] netlink: 68 bytes leftover after parsing attributes in process `syz.2.107'. [ 140.177414][ T6361] binder: 6359:6361 ioctl c0306201 2000000001c0 returned -22 [ 140.868123][ T6376] FAULT_INJECTION: forcing a failure. [ 140.868123][ T6376] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 141.017681][ T6376] CPU: 1 UID: 0 PID: 6376 Comm: syz.0.113 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 141.017710][ T6376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 141.017724][ T6376] Call Trace: [ 141.017739][ T6376] [ 141.017747][ T6376] dump_stack_lvl+0x189/0x250 [ 141.017775][ T6376] ? __pfx____ratelimit+0x10/0x10 [ 141.017797][ T6376] ? __pfx_dump_stack_lvl+0x10/0x10 [ 141.017813][ T6376] ? __pfx__printk+0x10/0x10 [ 141.017841][ T6376] should_fail_ex+0x414/0x560 [ 141.017866][ T6376] _copy_to_user+0x31/0xb0 [ 141.017884][ T6376] simple_read_from_buffer+0xe1/0x170 [ 141.017910][ T6376] proc_fail_nth_read+0x1df/0x250 [ 141.017927][ T6376] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 141.017944][ T6376] ? rw_verify_area+0x258/0x650 [ 141.017963][ T6376] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 141.017978][ T6376] vfs_read+0x200/0x980 [ 141.018003][ T6376] ? __pfx___mutex_lock+0x10/0x10 [ 141.018017][ T6376] ? __pfx_vfs_read+0x10/0x10 [ 141.018038][ T6376] ? __fget_files+0x2a/0x420 [ 141.018055][ T6376] ? __fget_files+0x3a0/0x420 [ 141.018067][ T6376] ? __fget_files+0x2a/0x420 [ 141.018087][ T6376] ksys_read+0x145/0x250 [ 141.018108][ T6376] ? __pfx_ksys_read+0x10/0x10 [ 141.018126][ T6376] ? rcu_is_watching+0x15/0xb0 [ 141.018151][ T6376] ? do_syscall_64+0xbe/0x3b0 [ 141.018168][ T6376] do_syscall_64+0xfa/0x3b0 [ 141.018182][ T6376] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.018196][ T6376] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 141.018214][ T6376] ? clear_bhb_loop+0x60/0xb0 [ 141.018232][ T6376] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.018246][ T6376] RIP: 0033:0x7f4ffb98d33c [ 141.018262][ T6376] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 141.018277][ T6376] RSP: 002b:00007f4ffc718030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 141.018293][ T6376] RAX: ffffffffffffffda RBX: 00007f4ffbbb5fa0 RCX: 00007f4ffb98d33c [ 141.018304][ T6376] RDX: 000000000000000f RSI: 00007f4ffc7180a0 RDI: 0000000000000005 [ 141.018313][ T6376] RBP: 00007f4ffc718090 R08: 0000000000000000 R09: 0000000000000000 [ 141.018322][ T6376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 141.018330][ T6376] R13: 0000000000000000 R14: 00007f4ffbbb5fa0 R15: 00007ffcf3019cb8 [ 141.018353][ T6376] [ 142.113589][ T6390] netlink: 68 bytes leftover after parsing attributes in process `syz.1.120'. [ 142.440810][ T6369] loop6: detected capacity change from 0 to 63 [ 142.536128][ T6369] Buffer I/O error on dev loop6, logical block 0, async page read [ 142.544400][ T6369] Buffer I/O error on dev loop6, logical block 1, async page read [ 142.552432][ T6369] Buffer I/O error on dev loop6, logical block 2, async page read [ 142.560517][ T6369] Buffer I/O error on dev loop6, logical block 3, async page read [ 142.568573][ T6369] Buffer I/O error on dev loop6, logical block 0, async page read [ 142.576586][ T6369] Buffer I/O error on dev loop6, logical block 1, async page read [ 142.584686][ T6369] Buffer I/O error on dev loop6, logical block 2, async page read [ 142.592693][ T6369] Buffer I/O error on dev loop6, logical block 3, async page read [ 142.600731][ T6369] Buffer I/O error on dev loop6, logical block 0, async page read [ 142.608695][ T6369] Buffer I/O error on dev loop6, logical block 1, async page read [ 143.934989][ T6394] netlink: 8 bytes leftover after parsing attributes in process `syz.0.119'. [ 143.944133][ T6394] netlink: 4 bytes leftover after parsing attributes in process `syz.0.119'. [ 144.310544][ T43] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 144.509227][ T43] usb 2-1: unable to get BOS descriptor or descriptor too short [ 144.549408][ T6411] netlink: 8 bytes leftover after parsing attributes in process `syz.4.125'. [ 144.562470][ T6411] IPVS: Error joining to the multicast group [ 144.693127][ T43] usb 2-1: config 9 has an invalid interface number: 73 but max is 0 [ 144.701608][ T43] usb 2-1: config 9 has no interface number 0 [ 144.708488][ T43] usb 2-1: config 9 interface 73 has no altsetting 0 [ 144.718107][ T43] usb 2-1: New USB device found, idVendor=17a1, idProduct=0128, bcdDevice=6b.f1 [ 146.968212][ T6423] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 147.339910][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.361228][ T43] usb 2-1: Product: syz [ 147.365545][ T43] usb 2-1: Manufacturer: syz [ 147.370244][ T43] usb 2-1: SerialNumber: syz [ 147.385400][ T43] usb 2-1: can't set config #9, error -71 [ 147.512202][ T43] usb 2-1: USB disconnect, device number 4 [ 148.690975][ T6453] netlink: 12 bytes leftover after parsing attributes in process `syz.4.135'. [ 148.705798][ T6453] tmpfs: Bad value for 'mpol' [ 149.403526][ T6455] Zero length message leads to an empty skb [ 149.635638][ T6450] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 149.723715][ T6459] netlink: 8 bytes leftover after parsing attributes in process `syz.0.138'. [ 149.734834][ T6459] IPVS: Error joining to the multicast group [ 154.380862][ T5920] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 154.580540][ T10] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 154.598880][ T6471] ------------[ cut here ]------------ [ 154.605507][ T6471] WARNING: CPU: 0 PID: 6471 at ./include/linux/memcontrol.h:371 folio_memcg+0x1a8/0x310 [ 154.616139][ T6471] Modules linked in: [ 154.620369][ T6471] CPU: 0 UID: 0 PID: 6471 Comm: syz.2.145 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 154.632392][ T6471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 154.643190][ T6471] RIP: 0010:folio_memcg+0x1a8/0x310 [ 154.648458][ T6471] Code: 80 3c 28 00 74 08 4c 89 f7 e8 74 ca 1b 00 4d 8b 36 4c 89 f0 5b 41 5c 41 5d 41 5e 41 5f 5d e9 0f 56 65 09 cc e8 f9 74 ba ff 90 <0f> 0b 90 eb c5 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c fe fe ff ff [ 154.668283][ T6471] RSP: 0018:ffffc900031d7250 EFLAGS: 00010283 [ 154.674517][ T6471] RAX: ffffffff8205bd57 RBX: 0000000000000000 RCX: 0000000000080000 [ 154.682581][ T6471] RDX: ffffc9000c31b000 RSI: 0000000000001eb4 RDI: 0000000000001eb5 [ 154.690697][ T6471] RBP: 0000000000000000 R08: ffffea00016e7047 R09: 1ffffd40002dce08 [ 154.698718][ T6471] R10: dffffc0000000000 R11: fffff940002dce09 R12: ffffea00016e7070 [ 154.706809][ T6471] R13: dffffc0000000000 R14: ffff88803244ec80 R15: 0000000000000002 [ 154.715689][ T6471] FS: 00007f3b42f206c0(0000) GS:ffff888125c4f000(0000) knlGS:0000000000000000 [ 154.725329][ T6471] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 154.732008][ T6471] CR2: 0000000000000000 CR3: 00000000291e0000 CR4: 00000000003526f0 [ 154.740035][ T6471] Call Trace: [ 154.743401][ T6471] [ 154.746381][ T6471] workingset_activation+0x5f/0x4a0 [ 154.751700][ T6471] ? folio_mark_accessed+0x2b1/0x4a0 [ 154.757055][ T6471] folio_mark_accessed+0x3b5/0x4a0 [ 154.762334][ T6471] kvm_release_page_clean+0x9a/0xe0 [ 154.767593][ T6471] kvm_tdp_page_fault+0x2dd/0x370 [ 154.772753][ T6471] kvm_mmu_do_page_fault+0x2c5/0x640 [ 154.778103][ T6471] ? vmx_vcpu_run+0xd8b/0x25d0 [ 154.782971][ T6471] ? __pfx_kvm_mmu_do_page_fault+0x10/0x10 [ 154.788867][ T6471] ? vmx_handle_exit_irqoff+0x29e/0xad0 [ 154.794608][ T6471] ? __pfx_current_save_fsgs+0x10/0x10 [ 154.800133][ T6471] kvm_mmu_page_fault+0x22f/0xb70 [ 154.805300][ T6471] ? __pfx_handle_ept_violation+0x10/0x10 [ 154.811951][ T6471] vmx_handle_exit+0x1090/0x18a0 [ 154.816966][ T6471] ? vcpu_run+0x361c/0x6f70 [ 154.822203][ T6471] ? rcu_is_watching+0x15/0xb0 [ 154.827045][ T6471] vcpu_run+0x432e/0x6f70 [ 154.831502][ T6471] ? vcpu_run+0x361c/0x6f70 [ 154.836112][ T6471] ? __pfx_vcpu_run+0x10/0x10 [ 154.840954][ T6471] ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940 [ 154.846746][ T6471] ? rcu_is_watching+0x15/0xb0 [ 154.851734][ T6471] kvm_arch_vcpu_ioctl_run+0xfc9/0x1940 [ 154.857353][ T6471] ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940 [ 154.863187][ T6471] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 154.869331][ T6471] ? rcu_is_watching+0x15/0xb0 [ 154.874248][ T6471] ? look_up_lock_class+0x74/0x170 [ 154.879435][ T6471] ? register_lock_class+0x51/0x320 [ 154.884904][ T6471] ? __lock_acquire+0xab9/0xd20 [ 154.889851][ T6471] kvm_vcpu_ioctl+0x95c/0xe90 [ 154.894659][ T6471] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 154.899925][ T6471] ? __lock_acquire+0xab9/0xd20 [ 154.904902][ T6471] ? __asan_memset+0x22/0x50 [ 154.909551][ T6471] ? smack_file_ioctl+0x302/0x340 [ 154.915514][ T6471] ? __pfx_smack_file_ioctl+0x10/0x10 [ 154.921622][ T6471] ? __fget_files+0x2a/0x420 [ 154.926282][ T6471] ? __fget_files+0x3a0/0x420 [ 154.931072][ T6471] ? __fget_files+0x2a/0x420 [ 154.935719][ T6471] ? bpf_lsm_file_ioctl+0x9/0x20 [ 154.940863][ T6471] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 154.946204][ T6471] __se_sys_ioctl+0xfc/0x170 [ 154.950918][ T6471] do_syscall_64+0xfa/0x3b0 [ 154.955472][ T6471] ? lockdep_hardirqs_on+0x9c/0x150 [ 154.960832][ T6471] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.966953][ T6471] ? clear_bhb_loop+0x60/0xb0 [ 154.971780][ T6471] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.977726][ T6471] RIP: 0033:0x7f3b4218e929 [ 154.982261][ T6471] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 155.002024][ T6471] RSP: 002b:00007f3b42f20038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 155.010583][ T6471] RAX: ffffffffffffffda RBX: 00007f3b423b5fa0 RCX: 00007f3b4218e929 [ 155.019403][ T6471] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000009 [ 155.020878][ T5955] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 155.028066][ T6471] RBP: 00007f3b42210b39 R08: 0000000000000000 R09: 0000000000000000 [ 155.043050][ T6471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 155.051131][ T6471] R13: 0000000000000000 R14: 00007f3b423b5fa0 R15: 00007ffcc5ab8c48 [ 155.059168][ T6471] [ 155.062399][ T6471] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 155.069714][ T6471] CPU: 0 UID: 0 PID: 6471 Comm: syz.2.145 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 155.081620][ T6471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 155.091778][ T6471] Call Trace: [ 155.095071][ T6471] [ 155.098016][ T6471] dump_stack_lvl+0x99/0x250 [ 155.102630][ T6471] ? __asan_memcpy+0x40/0x70 [ 155.107242][ T6471] ? __pfx_dump_stack_lvl+0x10/0x10 [ 155.112461][ T6471] ? __pfx__printk+0x10/0x10 [ 155.117111][ T6471] panic+0x2db/0x790 [ 155.121050][ T6471] ? __pfx_panic+0x10/0x10 [ 155.125513][ T6471] __warn+0x31b/0x4b0 [ 155.129510][ T6471] ? folio_memcg+0x1a8/0x310 [ 155.134119][ T6471] ? folio_memcg+0x1a8/0x310 [ 155.138729][ T6471] report_bug+0x2be/0x4f0 [ 155.143084][ T6471] ? folio_memcg+0x1a8/0x310 [ 155.147702][ T6471] ? folio_memcg+0x1a8/0x310 [ 155.152311][ T6471] ? folio_memcg+0x1aa/0x310 [ 155.156919][ T6471] handle_bug+0x84/0x160 [ 155.161180][ T6471] exc_invalid_op+0x1a/0x50 [ 155.165713][ T6471] asm_exc_invalid_op+0x1a/0x20 [ 155.170582][ T6471] RIP: 0010:folio_memcg+0x1a8/0x310 [ 155.175804][ T6471] Code: 80 3c 28 00 74 08 4c 89 f7 e8 74 ca 1b 00 4d 8b 36 4c 89 f0 5b 41 5c 41 5d 41 5e 41 5f 5d e9 0f 56 65 09 cc e8 f9 74 ba ff 90 <0f> 0b 90 eb c5 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c fe fe ff ff [ 155.195461][ T6471] RSP: 0018:ffffc900031d7250 EFLAGS: 00010283 [ 155.201549][ T6471] RAX: ffffffff8205bd57 RBX: 0000000000000000 RCX: 0000000000080000 [ 155.209538][ T6471] RDX: ffffc9000c31b000 RSI: 0000000000001eb4 RDI: 0000000000001eb5 [ 155.217525][ T6471] RBP: 0000000000000000 R08: ffffea00016e7047 R09: 1ffffd40002dce08 [ 155.225518][ T6471] R10: dffffc0000000000 R11: fffff940002dce09 R12: ffffea00016e7070 [ 155.233511][ T6471] R13: dffffc0000000000 R14: ffff88803244ec80 R15: 0000000000000002 [ 155.241512][ T6471] ? folio_memcg+0x1a7/0x310 [ 155.246136][ T6471] workingset_activation+0x5f/0x4a0 [ 155.251441][ T6471] ? folio_mark_accessed+0x2b1/0x4a0 [ 155.256759][ T6471] folio_mark_accessed+0x3b5/0x4a0 [ 155.261896][ T6471] kvm_release_page_clean+0x9a/0xe0 [ 155.267133][ T6471] kvm_tdp_page_fault+0x2dd/0x370 [ 155.272188][ T6471] kvm_mmu_do_page_fault+0x2c5/0x640 [ 155.277495][ T6471] ? vmx_vcpu_run+0xd8b/0x25d0 [ 155.282275][ T6471] ? __pfx_kvm_mmu_do_page_fault+0x10/0x10 [ 155.288117][ T6471] ? vmx_handle_exit_irqoff+0x29e/0xad0 [ 155.293682][ T6471] ? __pfx_current_save_fsgs+0x10/0x10 [ 155.299165][ T6471] kvm_mmu_page_fault+0x22f/0xb70 [ 155.304218][ T6471] ? __pfx_handle_ept_violation+0x10/0x10 [ 155.309958][ T6471] vmx_handle_exit+0x1090/0x18a0 [ 155.314918][ T6471] ? vcpu_run+0x361c/0x6f70 [ 155.319441][ T6471] ? rcu_is_watching+0x15/0xb0 [ 155.324233][ T6471] vcpu_run+0x432e/0x6f70 [ 155.328602][ T6471] ? vcpu_run+0x361c/0x6f70 [ 155.333170][ T6471] ? __pfx_vcpu_run+0x10/0x10 [ 155.337872][ T6471] ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940 [ 155.343624][ T6471] ? rcu_is_watching+0x15/0xb0 [ 155.348417][ T6471] kvm_arch_vcpu_ioctl_run+0xfc9/0x1940 [ 155.353996][ T6471] ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940 [ 155.359744][ T6471] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 155.365749][ T6471] ? rcu_is_watching+0x15/0xb0 [ 155.370535][ T6471] ? look_up_lock_class+0x74/0x170 [ 155.375682][ T6471] ? register_lock_class+0x51/0x320 [ 155.380898][ T6471] ? __lock_acquire+0xab9/0xd20 [ 155.385791][ T6471] kvm_vcpu_ioctl+0x95c/0xe90 [ 155.390492][ T6471] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 155.395710][ T6471] ? __lock_acquire+0xab9/0xd20 [ 155.400577][ T6471] ? __asan_memset+0x22/0x50 [ 155.405189][ T6471] ? smack_file_ioctl+0x302/0x340 [ 155.410238][ T6471] ? __pfx_smack_file_ioctl+0x10/0x10 [ 155.415638][ T6471] ? __fget_files+0x2a/0x420 [ 155.420244][ T6471] ? __fget_files+0x3a0/0x420 [ 155.424939][ T6471] ? __fget_files+0x2a/0x420 [ 155.429546][ T6471] ? bpf_lsm_file_ioctl+0x9/0x20 [ 155.434507][ T6471] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 155.439727][ T6471] __se_sys_ioctl+0xfc/0x170 [ 155.444344][ T6471] do_syscall_64+0xfa/0x3b0 [ 155.448869][ T6471] ? lockdep_hardirqs_on+0x9c/0x150 [ 155.454092][ T6471] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.460176][ T6471] ? clear_bhb_loop+0x60/0xb0 [ 155.464870][ T6471] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.470776][ T6471] RIP: 0033:0x7f3b4218e929 [ 155.475207][ T6471] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 155.494828][ T6471] RSP: 002b:00007f3b42f20038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 155.503272][ T6471] RAX: ffffffffffffffda RBX: 00007f3b423b5fa0 RCX: 00007f3b4218e929 [ 155.511258][ T6471] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000009 [ 155.519237][ T6471] RBP: 00007f3b42210b39 R08: 0000000000000000 R09: 0000000000000000 [ 155.527225][ T6471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 155.535219][ T6471] R13: 0000000000000000 R14: 00007f3b423b5fa0 R15: 00007ffcc5ab8c48 [ 155.543227][ T6471] [ 155.546540][ T6471] Kernel Offset: disabled [ 155.550900][ T6471] Rebooting in 86400 seconds..