last executing test programs: 21.501750602s ago: executing program 0 (id=62): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180100002100000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x11, 0x2}, 0x0, 0x0, &(0x7f0000000000)) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="fc0000001900e1f6ddedabc4ac5c000000000000000000000000000000000001ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000100000006000000000000000000000000000000010000000000000044000500ac1414aa000000000000000000000000000000003c000000020000000a0101020000000000000000000000000600000004030000"], 0xfc}}, 0x0) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x36, 0x0, 0x0, 0x20000000}, 0xa}], 0x400000000000172, 0x0) 15.595005847s ago: executing program 0 (id=71): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1011}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', 0x1}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(&(0x7f0000000140)=@filename='none\x00', &(0x7f0000000180)='./sys\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/net/syzkaller1/gro_flush_timeout\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='200000000', 0x9) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/class/net/syzkaller1/napi_defer_hard_irqs\x00', 0x1, 0x0) write(r3, &(0x7f00000002c0)='100\n', 0x4) close(r3) write(r0, &(0x7f0000000300)="4500002c00014000400626c90a0000010a00000203e80050000000010000000150101000323f0000aaaa", 0x2a) write(r0, 0x0, 0x0) write(r0, &(0x7f0000000380)="4500002c00014000400626c90a0000010a00000203ea0050000000010000000150101000323d0000aaaaaaaa", 0x2c) write(r0, &(0x7f0000000400)="4500002c00014000400626c90a0000010a00000203ec0050000000010000000150101000323b0000aaaaaa", 0x2b) write(r0, &(0x7f0000000440)="4500002c00014000400626c90a0000010a00000203ed0050000000010000000150101000323a00", 0x27) write(r0, &(0x7f0000000480)="4500002c00014000400626c90a0000010a00000203ee005000000001000000015010100032390000aaaaaa", 0x2b) write(r0, &(0x7f0000000500)="4500002c00014000400626c90a0000010a00000203f0005000000001000000015010100032370000aaaaaaaa", 0x2c) 14.43471902s ago: executing program 4 (id=73): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r4, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r5 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r5, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x300, 0xfffe, 0x101}}) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0) socket$netlink(0x10, 0x3, 0x0) 14.146785186s ago: executing program 0 (id=74): openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) ptrace$setregset(0x4205, r0, 0x6, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000140)={0x1d, 0x0, 0x3, {0x0, 0xff, 0x3}, 0xfd}, 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) write$P9_RSTATu(r4, &(0x7f00000004c0)={0x293, 0x7d, 0x0, {{0x500, 0xf0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x1f, ' nodev{cvfox\x92\xff\xff\xff\x81\x02\x00\x00\x00\x00\x001\xff\xce\xbc\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05\xf7\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x12, '\xcf\xc2\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\x13\xf6\x00', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a7\x00'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x232) 12.174987198s ago: executing program 1 (id=76): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x6a, 0x4, 0x0, &(0x7f00000000c0)=0xffffffffffffff16) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) openat$dir(0xffffffffffffff9c, 0x0, 0x200000, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_group_source_req(r3, 0x29, 0x3c, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0xfe, 0xc8, 0x9}}}, 0x7) 12.050715031s ago: executing program 0 (id=77): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x21, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000b00)='net/rpc\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, &(0x7f0000000080)=0xffd2) sched_setaffinity(r3, 0x47, &(0x7f0000000200)=0x7) syz_open_dev$sndpcmp(0x0, 0x1, 0x2) r5 = openat(r0, &(0x7f0000000c00)='auth.unix.ip/channel\x00', 0x2, 0x0) write(r5, 0x0, 0x0) 11.149383505s ago: executing program 4 (id=78): socket$inet6_icmp(0xa, 0x2, 0x3a) socketpair$unix(0x1, 0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r3}, &(0x7f0000000540), 0x0}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup(r4, &(0x7f0000000280)='syz0\x00', 0x200002, 0x0) r6 = openat$cgroup_type(r5, &(0x7f00000003c0), 0x2, 0x0) write$cgroup_type(r6, 0x0, 0x0) ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_DESTROY(0xffffffffffffffff, 0xc008644c, &(0x7f0000000140)) 10.913780985s ago: executing program 2 (id=80): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x80801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x54}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000, 0x0, 0xf4ffffff}) 9.784770861s ago: executing program 4 (id=81): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f0000000140)='securityfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000e0)='./sec/tomoyo/profile\x00', 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) syz_open_dev$video(&(0x7f0000000000), 0xfffffffffffffff9, 0x40) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) syz_open_dev$loop(&(0x7f0000000000), 0x7b, 0xa004) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) userfaultfd(0x1) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502", @ANYRES16=r0], 0x3c}, 0x1, 0x0, 0x0, 0x8800}, 0x10) 9.547000319s ago: executing program 1 (id=82): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000140)=ANY=[], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) syz_open_dev$mtd(0x0, 0x46, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$RTC_WKALM_RD(r2, 0x80287010, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f00000003c0)=@ethtool_flash={0x33, 0x7, '.\x00'}}) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)=@newqdisc={0x3c, 0x24, 0xe0b, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4000080) 9.32216689s ago: executing program 2 (id=83): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x70, 0x0, 0x1, 0x401, 0x11, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_SEQ_ADJ_REPLY={0x14, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x9}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x4}]}]}, 0x70}}, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) ioprio_get$uid(0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x1ac81b, 0x0, 0x0, 0x0, 0x1000000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8, 0x0, 0x0, 0x1010000}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)={0x40, r1, 0x1, 0x70bd2d, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x9, 0x45}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0xd}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x40}, 0x1, 0x0, 0x0, 0x4000019}, 0x0) 8.316196918s ago: executing program 4 (id=84): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x10301) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r1, 0xc0105303, &(0x7f0000000100)={0x0, 0x0, 0xfb}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001900)=[{&(0x7f0000000640)="574cc524809739b437c849fbe1291d024155e81bda5ba07a14ade691b57f05053167e24078a067890144e2115a28e5fec54c8be7e5d02df0db0946bba1c56a0f32160c2054324f4a8cdb5c4d4de23ee2033a28f0b9bc6cfdd19106b32362e9de335601d449677abe3bb746c6979da15a55c551bc3177d63b5666305723ef02fa0500f2d168d317f95355e6a6b20d71f09fee2cbacf590ee83847a5de33effd8dc07c3f100c4e030db841eecbc5892402", 0xb0}, {0x0}, {&(0x7f0000001ac0)="717e76984018558547a85496a1d6e5f8f4a622498dab6c6fc17033c9287b9406870b940c8b20d673fe0968a9f772c6e4e54d0653cba4588c2296162d6d35ef0a216f0e5284ed3d41008914e279661ac643883c50a6d2b3ec308b2fa1dfaf52fed6e92f078aefdcfe9fe6137b58bf25d336438c1c5143c8ecbdcd4648b88a8f0319f4707cf5e4ea9fbdb9e8048b2f1b627ee74e01b61a9356dde03fcd782d6d3e559c9bbf5e2b6f834f7c0cc27c6937db82067041c9356527f71f9831d7f32818dd66f3c0caf9554104749f1de82842da0a96d13ac09910d2b6a7e0bc2d025ce74c2483865dab2b1f154c90e75fe515dc106ec0db6442f98dcb5dbf80d3564704b234b9873618d8585512642f6ab28afcebee109a10518eb73c8665bf46e73ab8eda0fc9406325821dd201c79751efe880995e7df7a16b0ea20222b4ccc0731711d05d942a7dba322685aaa7b2958b083bd39359b3ffd4395279de03639282923af183ed4516080fa8081ec00f8afb4e3ce8c3f65e7fb7e3070dabb820d770f017417ef3749f5b0724eadefc3bd53fbc639c8a7bf7252b2ec6a9c968cd60a019886b29201f201ad3006352c04f2f9c5a7f38c64e5bb3f558d8591d1f4de56c5d85596b356d27fb46a2d28867b724f9390a2dfaad6d124213a3fcac12b04cdf86fcbe6a018f6615e7ae1e8bdecdd8235ac32d8ffe0d3ab8d69021887b8d818a282dae2ffc78f88a5e36bfeb3c0551dbec2c3eeeb004eceb679b2aad7b6ec9b296137415540f1334190b242865790afba51b141f5e33ab83fca127c0f483444780c7042dc8cbdad05ad77e19e6b5dd856347fd546c80e6c64c824ff3daa12665e210233d175b395828a3d7c34810d1f211ec9d161cc7fbecf416ab44a147c8db53cef6299ca85be6f7c3ad883b3f4d35bf54e7b6bbadba181d20965da5df8ac5e1d36481b2bacaf94b2757f7f10f3f0d04520c30238d4a6eedebc36d70cb344f79b902294efd4983ef474990c29b4032afb1ce2b304999b6b723874703e050152ad85125b9fbabbc4def428ce4c5a1f2f775619e756328ab83c5b21b6361a4bc18a48ce985e0c432edde50edb032110f424884a23c8fcf4af9c02042f8bb37e369b28b6aeb5f9a30fbaee52c7bfde2e7634f7097c16d90206f83892ffb45aed96077535c7538f65d85517a2646e2e4a20887a311e41cfb73ad10b366272c2a4dd0868395d7de1e6c4bada892ea75d9c624a1012cee2c7424dbf11a33c7a6948d70ebec66668fed8e0ad62872ec0337a15bfd1d64113e036a8909f662550bb264579fa28bd12967fc4ea2db3e003b5a8301b566be35b29f044bc5056b6b9381d147f5e5f97549954a06f60a837d0bb6828c628cf887cea53c9aece301b1aa1c3059f130b19fcfa4a0eba1f28372e9201c88c762cd1cdf26da72e7b8ab5a4575cb8b629e91ada58e0bbbf728725a82fe0f2b417adb3549d61d0b46fb703b95ae6e94aba3ca0f647b15eddc5897fa2da470ed87ad38c7fd91ade4f84af7dcc8dd69d411a97217378387ce8e1f57fdd378f99c9e075169bfe1ccfda6d9e5a3d87d0cdfb6a79f8adc9749aa6cfbff7b88f8066a0f65439ac4b97607764b23f1b4387fe9a8c6553c01609d3ff0198fbcd29239a894fb3aaa0203ea2f22a71d06304ac868602ae62fec1e6e31f713ed28228115ac44e41f1cc7ffa47e9ea6a5ef26a14ca334f28e097f0ab7b823984d7c3d85a3bde51c02b161269960b23abbdb35d71a51728c19a0e3a5acf048752e310edfcb9541a7ec5f59e7c1c171ff98530dbf01efed491587e7c87201daefa9aa89527a1d9792b21ef8046be77f54a94d9ed267c83d7ab9c88eddc55444e7ce1b7bd85e2052c6e413a92b323975135c784a32df593ebd673473a9df9d27752fcd8ecbd4ef45a02ee54fd3075d709972b9a28f819e29779d422de2dfab5e849a27c4d7bf556458e42f5a179119daaff4aab36c51c8f57a509334f5b514ec92c721d49b9bcf6a4087c2cc21c010b92014d55bac02b10be17063906f993ba958fdfffae253401b720f031b6fcb7ee56d4b09426051ac3fdacbfd2b343b422721912bb8fcd5eda451d0aa7d93d6a8c2575ff410bb068f9a5b7282aeef216f893516bf12d733077ed6ad57a44e2ea6f6aaca29f363375b37dd8915c74626649ca00fd3ad90c0c7569b7ed816ec143707364b3d3c5aaa7ff38117fbb4421b51e202d1a4f4215eda5535f2787dbb68b24746996827bc324f510466b3b85a06d43bf89635a866bb96bbfbca365b5e2cc745c2df75334a47377dd75dc4634b9efe85f2f405a7a1aac308f4ace7283afe1696dec03fd6337c5b092e6858aa70056d62629a125f2449e9762e424e34d2eaad5fe47f800f4e7fbd68ec57cf4653f05e30112de84e454890b86d4b30556d6d30158efcc66d07b209f7bb0cdb9a651a287ae4d8c40158da6111837580b6913bb19d5b23456438e67ea4098de20b0ac3d6c2521422864a539b8ad4f58496891e4416a63b46f9db4f932255069966128025cad3d2ecab091f8c4f56ea41056bc4c50b428f3674fa33f5c9d494fdd2ce9437cf54b288c2d0188f9bf64289224da2dd9c9dde078c1e72c1567ed6e61e1abba1376587a847f34183e73d63b09b7a1b78d3c44b93f4aa4698dfd173b20ecd5ff7b6ff7d68d7bd67deda3ff645d8df330e532f3082d81f79d84dc2cd2bb4ed9f42fe54ea3c182453cf21ed321173dca97a80ceeae4552e7d8896dd52b5e8146002228fa1fe4bd43db55d97c1a7924da170f7a2cac067cfe3720855af79132508cbc4bfb6c1ae2c5d1662ebea56f33b7ee4d87f9f9c205321cfdb6216aa866bb61844648d07d10ff840cf3bcc5a03db2b7cf6d7276fde990b5f8d0b4895e42fc4b7ad049626295d2b6b15215821f93181758305ed255d0cb55f671b44057540bdebe69c7e48334ad7e847aa8f1281b967669f1f48c333c96fa2db0e78e17843bd3c02a35cf0eebf15e1a7f3c67b344cb1a25bf18f7b0b7f4e895160432af6b1eeb828d3a7f934b571ad345ea98aae1304573df23ca9b3723d5b5ff23baa97f431150124c434a436e9cf0e404b3ad71dafd69997bd01e85a63a4d38890fa6b8ab0d5731704834b10c539746103be0414ebb5d4f204e548831bbb8cab6c34e3214c3763ebb872721292fc76b53cc7a4114baf9a84ff8cf51a875644cb4484c6f898e1577281eec07a4c97fe1db05b8d710915fcc3e48c5640bd612d16fb12adf4295b8e14bf75b52739b3bcd83b9df3516fda46a9db032deb572316220cf2970359fc5a6bc9ee7e376dd6d2dcabfaa6b0f25b4719e1d28119c98bf1c58c9a1d459029c8a341df1d9754ea87d0830f7a8697c3d23dfa56cc3e424846ae9d3c8db4727c862eee3a841afb9dd03bb15896bb86f9fab80a1ce378ab3b71c94c7c59424ac3abe07aff89cc01c951a27b5df83ac1cdb2ef3c404326f8403de526694582ced73c113004f529de5ae237493c74870394a9cebaf93d91b9a50af823128b640c92a5425aeca2b061e5eb82f14504163f9f56a46e9091ebfad0bf33d0e1b533544a0474c107b148e9b94386ecc861707319a04266e71d4df2d36540d3986ffd733ba5aec2305084060af8febe9d505f65210e58e52735989942096c415ec30c1d249a0d6b793f7af1ca0ef088f02e05f8327bea07fa3190074948f98732666cc946bfc411b2d2796a98c7ce2f806548c29700e003106818f6d1f5c076773f3f4e34d8785423a3f7996779aed0866e1f29f58263444b37496a52b92441269954a76d9679003d67cb50e2d600ebde35b0b8d9e2f4b3bec8e97eecd7da83e3a1a576c4711fd02b0f6918a04404505aa5f7351ac8bb9c4b7443a32fbb35623ffe633f2c6841b7efaeaf3eee03a472c1258fbb4a94d1fc1e5ee01bc1d8273d8939453b40c42ad912c78bab0910fa6eb80f5519fde1c186a95214fdbd41e47148432255e630a4d5a1f7d277673478fee7ad5ba3583daa841ac36c3f92b66523a1ceac86c90cb6db5749c8850ff73623f5601ebba7b9898a5093c6d1368553855ff8c6f75fb4fdc8c8647e37f556f94504a37f72c60a944078038fda97afc2d0cd749e9450abc055b83791dcb3aa216e79c89f0994dea37b820f0b1aaf8976a16799c81b74615c41c282a5204d2f652ef7d79bafee87784b8157315752b8529af913d5ea718d34c3c1561dd406cd6ad9fe6a397949026b66ac5951a15f5ed140ee1f1873bb39b6f620566fe1836b7c8df8fb755d39e4726e9b5849dab0b75020dc037053673b1fd175ea60a96d64438525c3fb02fe30006b2c39bfdbe8ee4753a44ace2c461f21c67bd3307fdfe48b10f5df46b6ffb4eb9e0343a177726f578b7a4bb9fe58aa988736cb25522b15b7aa37c80e3bed7d7b477d3334a94443d827e938c458b02c7a813ba97d7014bd721be6c06be097921be4e60657519d362a91b4f226ab1864ccd4a0fc099ad3866e50312cd9cf92a980e79b50d0e3e61ffb802185d5c393923a2cbb0cf0c529a00276cf7d820a876e7946836289ee6936b6978554a0d25fa2a93b1e0ab1ca1f20d7e30031e66cfb5180553bea5cffc9c733d2192db86e41b1668f0a93e2b91b0e2f67bf0d391df61e8e023d69c0b29ab7ac93274d92d2f3a2e4afd666b93cb0c1932e668cbc5a466beede9a6f694d8137e82726db3acf840e102b7a8542601ffd4ea209ab7fd8f501ab6d3acf86503b1546cb0f591e731f416cdb3cb2729f7b26e228b10a06f4833a96b6e616d6e73a424330d37cf35f0008569e0ef8ee3dca3ea280273e42b23a71a323e350a72ab2093eca5f092652113c67cddcb87dce961635124f10a57ed8c2f8d7980d3bac5138ba102edda3a2cc4984e82163d5e0db2c43e0e030318d8d1d2c9ab071de375a7d25626f9664d1bf853731bb019a7f45628bbb4af4c766dcf3f3114eade54979d1f1a557aed63708bbb7489cddb700a9fb35adaaa8374d4cf53ce89e15ae924291af96f18718bd8f52604084d29a1de20fd6a47ab2ed816a6bfe760717be0bf5135c9c423c773dd77b2fb024b833600aec11e691605483c1ef64bc74cc36a1bef13e2cb1122f3b12bbf7dbc3aab109cba7934fb674b6485781b00823869d3346db57be3c215d7e3fa30c1c9146c0445b8dd77904de8ff18f107372d7ced4d71c019256cae55a88c16c382f0713c0871f4d1a2499a5b026070cda7b018e3ff03dfd91bf5df90f0e19714a2fa2bd6f56b208e2e1d83d1981104790f22b660d1a24a3442d19b498e1a9f7ae68443df1f2f4cc890c32db770c73cb6a1d38125327b56ff440bd61afdfdba9c8940d5848b8dfe83232c2316e68d099a342996db19d20957b5723806bdaef8711e7e59edac83255087f047381a01bf8a8e3b31ec0f35498976bf92b854d2403a71c70b8e1cd2cccf66cde2899628f67d06b9a81a7fd273ebe3b1459dea635287e7f50677541afee58ed39ea302559a0be2545945d5bb1784aca8d5957a9fb4c31866eecb34df4d9f9be3af88ba3da1e71a67bfa94418c33a50e544f9e03ff9f3bee081a3ef4c45ab39c024ace5f9a7cc962ee8d740b9", 0xf7f}, {0x0}, {&(0x7f0000001840)="9ecf4242e009fa692e46bd09e2a06f4724367ad3ac39973300d9190103046a7e0a66465f05bc6caf1ce63ea537c75d90c8f606276387543765a31113400906e0c19bb223e031ed243d161448f7a0d304bc19949dafafea2f763c41fe94f2686a2ad59f69b6fd73c1cfbbe79ddf5f2b3b8109da451c8c2f6e7e2f405e102c80ec5cd0622f17fea157557ce44648424b5caff65792806ac91edebd93e903d4ef", 0x9f}], 0x5, 0x0, 0x0, 0x7400}, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x101000) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r2, 0x40405515, &(0x7f0000000200)={0x3, 0x0, 0x0, 0x3, 'syz1\x00', 0x7}) getsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000300), &(0x7f0000000380)=0x4) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r3, 0x1, 0x12, &(0x7f0000000140)=0x101, 0x4) setuid(0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/comedi\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r5, 0x0, 0x0, 0x2, 0x0) read(r4, &(0x7f0000000100), 0x1000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000), 0xc, 0x0}, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) write(r0, &(0x7f0000000040)="2e000000010000", 0x7) 8.298529576s ago: executing program 1 (id=85): mkdirat(0xffffffffffffff9c, 0x0, 0xbd) openat(0xffffffffffffff9c, 0x0, 0x126c3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) add_key(0x0, &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r4 = msgget$private(0x0, 0x193) msgsnd(r4, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\b'], 0x23, 0x0) msgrcv(r4, &(0x7f0000000380)={0x0, ""/214}, 0xde, 0x2, 0x2000) msgctl$IPC_RMID(r4, 0x0) 6.724712413s ago: executing program 2 (id=86): mkdir(0x0, 0x1ff) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) syz_open_dev$media(&(0x7f0000000580), 0x3, 0x20000) socket$l2tp6(0xa, 0x2, 0x73) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) pselect6(0x40, &(0x7f00000001c0)={0x2, 0x0, 0x5, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x2, 0xa, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x50) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, 0x0) 6.674115467s ago: executing program 1 (id=87): ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$loop(0x0, 0x4, 0x901) gettid() fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x20000023896) 6.564238977s ago: executing program 4 (id=88): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) openat$uhid(0xffffffffffffff9c, 0x0, 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x1, 0x1, 0x0, &(0x7f0000000200)=""/51, 0x0}) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000340)) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x1}) 4.849217091s ago: executing program 3 (id=89): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xff, 0xc}}]}}]}, 0x48}}, 0x20040000) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0xffff}, {0xffff, 0xffff}, {0x2, 0x10}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x0, [0x2, 0x8, 0x3, 0x5, 0x2, 0x9, 0x2, 0xb, 0xc, 0xc, 0x1, 0x9, 0x9, 0xc, 0x1, 0x1], 0x1, [0x83, 0x8000, 0x3e63, 0x1, 0x466, 0x5, 0x7ff, 0x0, 0xaf, 0x9, 0x3, 0x9, 0x8e, 0xd4de, 0xb, 0xd], [0x2, 0x7, 0x6, 0x3ff, 0x101, 0x100, 0x5, 0xfffb, 0xfffb, 0x1000, 0x101, 0x81, 0x7fff, 0x4, 0x0, 0x7]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0x4}, {0xffff}, {0xfff3, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0x6, 0x8, 0x8, 0x2, 0x0, 0x1, 0x8, 0xff, 0x10, 0x4], 0x3, [0xc, 0x101, 0x4, 0x2002, 0x1, 0x4, 0x6, 0xd03, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x27, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x4]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) r11 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r11, &(0x7f00000002c0)="05031c00d3fc14e5fd004788031c", 0xe, 0x4, &(0x7f0000000140)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @multicast}, 0x14) 4.729762602s ago: executing program 4 (id=90): socket$inet_tcp(0x2, 0x1, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0xa8}) mremap(&(0x7f0000034000/0x2000)=nil, 0x2000, 0x7000, 0x3, &(0x7f0000ff8000/0x7000)=nil) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001964d408861a92e03f530102030109022400010200100309041f0202e917f300090502020002020000090582020002"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000ac0)={0x1c, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x1f, &(0x7f0000000000)=[@in={0x2, 0x4e22, @remote}, @in6={0xa, 0x4e23, 0x4, @mcast2}]}, &(0x7f0000000180)=0x10) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000140)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000002, 0x204031, 0xffffffffffffffff, 0xe60d3000) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r8, &(0x7f00000002c0)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r8, &(0x7f00000000c0), 0x2) read(r8, &(0x7f00000001c0)=""/93, 0x5d) write$USERIO_CMD_SEND_INTERRUPT(r8, &(0x7f0000000580)={0x2, 0xf8}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r8, &(0x7f0000000100), 0x2) splice(r4, 0x0, r7, 0x0, 0x39000, 0x0) r9 = memfd_create(&(0x7f0000000180)='J=\t\xeb\xf8\xa7\x04\x9f\xe1hO\x8e\xd7\xb5\x93}\x8d\xed\x01L`\x93\xcd^2P\x00$x\"\xda\xf1Az\xfe_\xc5\xb3\x9b`;\x1c\xfc\xaf9\x98\x91\xe7', 0x1) splice(r6, 0x0, r9, 0x0, 0x2, 0x5) write$binfmt_elf64(r5, 0x0, 0xfffffe3e) pipe2(&(0x7f0000000040), 0x0) 3.268807623s ago: executing program 0 (id=91): syz_genetlink_get_family_id$netlbl_calipso(0x0, 0xffffffffffffffff) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tgkill(r3, r3, 0x34) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x4) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x129a02, 0x5) sendfile(r5, r4, 0x0, 0x8) 3.173930061s ago: executing program 2 (id=92): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0xffff, 0x3fd, 0x0, 0xb2, 0x0, 0x2}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x9, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a, 0x3}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r3, 0x2) bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000440)=ANY=[], 0xc0) 2.294169161s ago: executing program 3 (id=93): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x42001, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) close(r1) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$kcm(0x11, 0x3, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000007300)=@newtfilter={0x40, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x5}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xb, 0xc}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x24048001}, 0x20044804) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r8, &(0x7f0000000440)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r12, 0x3c}, 0x80, &(0x7f0000000080)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1}, 0x804) 2.216797349s ago: executing program 2 (id=94): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x8, 0x2, 0x8, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0x2dcd, 0x1, 0xb4, 0x8, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x4000006, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4048aecb, &(0x7f0000000600)={0x1, 0x0, [{0x2, 0xfffffffe, 0x7, 0x8, 0x3, 0x110, 0x3}]}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f00000001c0)={0x60000, 0x18000, 0x9fef19c9430e26b8}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@getlink={0x28, 0x12, 0x1, 0x0, 0x0, {}, [@IFLA_EXT_MASK={0x8, 0x1d, 0x3ff}]}, 0x28}, 0x1, 0x0, 0x0, 0x2000}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1.919930379s ago: executing program 3 (id=95): socket$netlink(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x240403, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000140)=ANY=[@ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r1, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r2, 0x541c, &(0x7f0000000000)) 1.669893077s ago: executing program 3 (id=96): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) setsockopt$sock_int(r1, 0x1, 0x23, &(0x7f0000000000)=0x2, 0x4) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write(r2, &(0x7f0000000000)="2e000000010002", 0x7) bind$inet(r1, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r1, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000003c0)=""/148, 0x94}, {&(0x7f0000000480)=""/165, 0xa5}, {&(0x7f0000000540)=""/174, 0xae}, {&(0x7f0000000600)=""/69, 0x45}, {&(0x7f0000000680)=""/108, 0x6c}, {&(0x7f00000010c0)=""/245, 0xf5}, {&(0x7f00000008c0)=""/199, 0xc7}], 0x7, &(0x7f0000000a40)=""/151, 0x97}, 0x8}, {{&(0x7f0000000b00)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000b80)=""/157, 0x9d}, {&(0x7f0000000c40)=""/128, 0x80}], 0x2, &(0x7f0000000d00)=""/37, 0x25}, 0x3}, {{&(0x7f0000000d40)=@nl, 0x80, &(0x7f0000000ec0)=[{&(0x7f0000000dc0)=""/201, 0xc9}], 0x1, &(0x7f0000000f00)=""/53, 0x35}, 0x82ee}, {{0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000f40)=""/1, 0x1}], 0x1}, 0x7e21}], 0x4, 0x40002000, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x4020840}, 0x40) socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x99}, 0x40005) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xa}, 0x1c) socket(0xa, 0x5, 0x0) pselect6(0x40, &(0x7f0000000100)={0x5, 0x1b9, 0x0, 0x3, 0xfffffffffffffffc, 0x1ff, 0x0, 0x1}, 0x0, &(0x7f0000000080)={0x1f, 0xfffffffffffffffe, 0x0, 0x0, 0xb, 0x4, 0x0, 0xfffffffffffffffc}, &(0x7f0000000140)={0x0, 0x3938700}, 0x0) 1.054677971s ago: executing program 2 (id=97): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2001, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x100004, 0x220104, 0xe2a3, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000580), 0x2000cc0, r1}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, &(0x7f0000000440)=""/30, &(0x7f0000000380), &(0x7f0000000280), 0x1, r1}, 0x38) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000100)={0x1, 0x0, [{0x7, 0x5, 0x1, 0x0, @msi={0x6, 0x6, 0x5, 0x9}}]}) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x746f2f51, &(0x7f0000000080)=[{&(0x7f0000000040)="3f0400001c00810ce00f80ecdb4cb9f207c804a01f000000010006fb0a0002000a0ada1b40d80300000000000000", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', 0x0, 0x0, 0x0) mremap(&(0x7f00008d4000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) madvise(&(0x7f0000a30000/0x3000)=nil, 0x3000, 0x10) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) syz_io_uring_setup(0x508f, &(0x7f00000002c0)={0x0, 0xf59b, 0x800, 0x10003}, &(0x7f0000000140), &(0x7f0000000280), 0x0) syz_io_uring_setup(0xf00, &(0x7f0000000140)={0x0, 0x5961, 0x10000, 0x0, 0x4e}, &(0x7f0000000100), &(0x7f0000000000), 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002100)='numa_maps\x00') syz_io_uring_setup(0x315b, &(0x7f0000000200)={0x0, 0xcfca, 0x1040, 0x0, 0x1000001, 0x0, 0x0}, &(0x7f0000000100), &(0x7f0000000040), 0x0) read$FUSE(r4, &(0x7f0000002140)={0x2020}, 0x2020) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') 774.017671ms ago: executing program 1 (id=98): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x33, 0x65, 0x63, 0x65, 0x39, 0x34, 0x63, 0x64, 0x31, 0x30, 0x38, 0x37, 0x38, 0x38, 0x36, 0x33]}, &(0x7f0000000100)={0x0, "00379bce195566778899aabbccddfcff00112233445566778899aabbccddeeff000011688e0346d524b29db701e5ddeeff8000", 0x3d}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37, 0x30, 0x64, 0x30, 0x30, 0x6c, 0x30, 0x30, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x63, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x37, 0x0, 0x30, 0x32, 0x34, 0x64, 0x30, 0x30, 0x30, 0x30, 0x36, 0x61, 0x30, 0x33, 0x30, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32, 0x30, 0x61, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @desc2}, &(0x7f0000000100)={0x0, "00112233445566768899aabbccddeeff001122c6445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aa91ccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x31, 0x35, 0x63, 0x34, 0x30, 0x30, 0x30, 0x30, 0x62, 0x30, 0x30, 0x66, 0x36, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x39, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x54, 0x61, 0x65, 0x30, 0x65, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @desc3}, &(0x7f0000000100)={0x0, "00112233444d66778899aabbccddefff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556677889c69bbccddeeff", 0x40}, 0x48, r1) add_key$keyring(&(0x7f0000000640), &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, r1) add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x3}, 0x0, 0x0, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x67, 0x63, 0x66, 0x30, 0x30, 0x31, 0x30, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3e}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @desc4}, &(0x7f0000000800)={0x0, "0011223380ffffff8899aabbbcddeeff001122334455667736e59ce1f3495a3e00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x31, 0x30, 0x30, 0x31, 0x30, 0x30, 0x30, 0x30, 0x31, 0x31]}, &(0x7f0000000580)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) keyctl$unlink(0x9, r0, r1) 300.111074ms ago: executing program 3 (id=99): r0 = landlock_create_ruleset(&(0x7f00000000c0)={0xa019, 0x1, 0x3, 0x0, 0x0, 0x2}, 0x30, 0x0) landlock_restrict_self(r0, 0x0) 44.563489ms ago: executing program 0 (id=100): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x40080, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x63) readlinkat(0xffffffffffffffff, &(0x7f0000000240)='./file0/file0\x00', &(0x7f00000003c0)=""/188, 0xbc) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x2) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x28, 0x140c, 0x1, 0x70bd25, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_CQN={0x8}, @RDMA_NLDEV_ATTR_RES_CQN={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004810}, 0x40) creat(&(0x7f0000000000)='./file0\x00', 0xa2) r3 = syz_open_dev$dvb_frontend(&(0x7f0000000040), 0x0, 0x0) ioctl$FE_SET_PROPERTY(r3, 0x40086f52, &(0x7f0000000340)={0x2b, &(0x7f0000000080)=[{0x11, '\x00', @data=0x6, 0xf}]}) 43.068834ms ago: executing program 3 (id=101): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mkdir(&(0x7f0000000240)='./file0\x00', 0x97) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r3 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x3, 0x1, {0x0, 0x9, 0x20ff, 0x1, 0x89, 0xd615, 0x9, 0x7fffffff, 0x9, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x13}}}, 0xa0) sendfile(r3, r3, &(0x7f0000000080), 0x7f03) 0s ago: executing program 1 (id=102): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1cc) mount$bpf(0x0, 0x0, 0x0, 0x5805040, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) r0 = getpid() prlimit64(0x0, 0x1, 0x0, 0x0) sched_setscheduler(r0, 0x6, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$DCCPDIAG_GETSOCK(r3, 0x0, 0x8000) r4 = syz_pidfd_open(r0, 0x0) setns(r4, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.187' (ED25519) to the list of known hosts. [ 71.213971][ T5597] cgroup: Unknown subsys name 'net' [ 71.348394][ T5597] cgroup: Unknown subsys name 'cpuset' [ 71.357202][ T5597] cgroup: Unknown subsys name 'rlimit' [ 71.517739][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.518013][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 Setting up swapspace version 1, size = 127995904 bytes [ 72.732611][ T5597] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 76.586796][ T5621] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 76.588144][ T5622] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 76.588158][ T5621] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 76.589882][ T5621] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 76.590710][ T5621] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 76.591139][ T5622] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 76.591644][ T5621] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 76.592211][ T5622] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 76.592625][ T5624] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 76.592664][ T5622] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 76.593462][ T5624] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 76.593646][ T5624] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 76.595289][ T5625] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 76.595841][ T5625] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 76.596553][ T5625] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 76.597217][ T5625] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 76.599122][ T5614] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 76.603273][ T5614] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 76.603381][ T5614] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 76.605415][ T5625] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 76.617130][ T54] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 76.625147][ T5625] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.625253][ T5625] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 76.625787][ T5625] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 76.633243][ T5625] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 78.481086][ T5608] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.481178][ T5608] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.481295][ T5608] bridge_slave_0: entered allmulticast mode [ 78.482789][ T5608] bridge_slave_0: entered promiscuous mode [ 78.486921][ T5611] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.487015][ T5611] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.487124][ T5611] bridge_slave_0: entered allmulticast mode [ 78.489505][ T5611] bridge_slave_0: entered promiscuous mode [ 78.539867][ T5608] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.539964][ T5608] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.540201][ T5608] bridge_slave_1: entered allmulticast mode [ 78.541101][ T5608] bridge_slave_1: entered promiscuous mode [ 78.543305][ T5611] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.543398][ T5611] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.543516][ T5611] bridge_slave_1: entered allmulticast mode [ 78.545397][ T5611] bridge_slave_1: entered promiscuous mode [ 78.560398][ T5609] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.560494][ T5609] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.560602][ T5609] bridge_slave_0: entered allmulticast mode [ 78.562290][ T5609] bridge_slave_0: entered promiscuous mode [ 78.635423][ T5619] Bluetooth: hci3: command tx timeout [ 78.635423][ T4925] Bluetooth: hci1: command tx timeout [ 78.638067][ T5609] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.638160][ T5609] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.638620][ T5609] bridge_slave_1: entered allmulticast mode [ 78.640265][ T5609] bridge_slave_1: entered promiscuous mode [ 78.681697][ T5607] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.681775][ T5607] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.681998][ T5607] bridge_slave_0: entered allmulticast mode [ 78.683200][ T5607] bridge_slave_0: entered promiscuous mode [ 78.685954][ T5607] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.686045][ T5607] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.686165][ T5607] bridge_slave_1: entered allmulticast mode [ 78.687659][ T5607] bridge_slave_1: entered promiscuous mode [ 78.716483][ T4925] Bluetooth: hci0: command tx timeout [ 78.716627][ T4925] Bluetooth: hci4: command tx timeout [ 78.719181][ T5619] Bluetooth: hci2: command tx timeout [ 78.733889][ T5607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.769017][ T5608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.771243][ T5611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.773183][ T5607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.787116][ T5610] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.787219][ T5610] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.787326][ T5610] bridge_slave_0: entered allmulticast mode [ 78.790009][ T5610] bridge_slave_0: entered promiscuous mode [ 78.796464][ T5608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.811964][ T5611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.860838][ T5609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.861145][ T5610] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.861282][ T5610] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.861391][ T5610] bridge_slave_1: entered allmulticast mode [ 78.866473][ T5610] bridge_slave_1: entered promiscuous mode [ 78.895001][ T5608] team0: Port device team_slave_0 added [ 78.911606][ T5611] team0: Port device team_slave_0 added [ 78.913573][ T5607] team0: Port device team_slave_0 added [ 78.917092][ T5609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.942110][ T5608] team0: Port device team_slave_1 added [ 78.943816][ T5611] team0: Port device team_slave_1 added [ 78.947008][ T5607] team0: Port device team_slave_1 added [ 78.966546][ T5610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.996368][ T5609] team0: Port device team_slave_0 added [ 78.998333][ T5610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.031028][ T5609] team0: Port device team_slave_1 added [ 79.042800][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.042815][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.042837][ T5608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.044949][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.044962][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.044983][ T5611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.046703][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.046715][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.046736][ T5608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.097538][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.097555][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.097576][ T5607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.098590][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.098601][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.098622][ T5611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.281413][ T5610] team0: Port device team_slave_0 added [ 79.287171][ T5608] hsr_slave_0: entered promiscuous mode [ 79.288168][ T5608] hsr_slave_1: entered promiscuous mode [ 79.308805][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.308821][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.308843][ T5607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.309828][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.309840][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.309862][ T5609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.313310][ T5610] team0: Port device team_slave_1 added [ 79.369423][ T5611] hsr_slave_0: entered promiscuous mode [ 79.370298][ T5611] hsr_slave_1: entered promiscuous mode [ 79.370991][ T5611] debugfs: 'hsr0' already exists in 'hsr' [ 79.371079][ T5611] Cannot create hsr debugfs directory [ 79.432334][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.432349][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.432371][ T5609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.496381][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.496400][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.496418][ T5610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.549398][ T5607] hsr_slave_0: entered promiscuous mode [ 79.550357][ T5607] hsr_slave_1: entered promiscuous mode [ 79.550986][ T5607] debugfs: 'hsr0' already exists in 'hsr' [ 79.551003][ T5607] Cannot create hsr debugfs directory [ 79.561448][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.561462][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.561484][ T5610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.644586][ T5609] hsr_slave_0: entered promiscuous mode [ 79.647983][ T5609] hsr_slave_1: entered promiscuous mode [ 79.650174][ T5609] debugfs: 'hsr0' already exists in 'hsr' [ 79.650194][ T5609] Cannot create hsr debugfs directory [ 79.733961][ T5610] hsr_slave_0: entered promiscuous mode [ 79.734578][ T5610] hsr_slave_1: entered promiscuous mode [ 79.735765][ T5610] debugfs: 'hsr0' already exists in 'hsr' [ 79.735785][ T5610] Cannot create hsr debugfs directory [ 80.084898][ T5611] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 80.089704][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.119715][ T5611] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 80.122299][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.123015][ T5611] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 80.126731][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.130699][ T5611] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 80.143761][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.207257][ T5608] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 80.213215][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.213810][ T5608] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 80.218998][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.225040][ T5608] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 80.233313][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.234176][ T5608] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 80.240004][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.334572][ T5609] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 80.344234][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.354943][ T5609] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 80.358831][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.360184][ T5609] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 80.363462][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.369028][ T5609] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 80.377114][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.487424][ T5610] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 80.491717][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.494286][ T5610] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 80.505625][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.507522][ T5610] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 80.512612][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.551176][ T5610] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 80.563492][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.577904][ T5611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.667495][ T5611] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.695572][ T5607] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 80.698982][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.699563][ T5607] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 80.702571][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.703777][ T5607] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 80.710385][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.719754][ T5619] Bluetooth: hci1: command tx timeout [ 80.724795][ T5619] Bluetooth: hci3: command tx timeout [ 80.728197][ T5608] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.733419][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.733524][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.761868][ T5607] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 80.790988][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.794993][ T5619] Bluetooth: hci2: command tx timeout [ 80.795021][ T5619] Bluetooth: hci4: command tx timeout [ 80.795039][ T5619] Bluetooth: hci0: command tx timeout [ 80.815740][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.815839][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.883705][ T5609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.892235][ T5608] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.923446][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.923520][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.956624][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.956684][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.003342][ T5609] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.041217][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.041321][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.070426][ T5610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.111276][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.111362][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.188246][ T5610] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.229429][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.229533][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.260448][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.260560][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.325324][ T5607] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.429304][ T5607] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.478599][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.478683][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.497319][ T5610] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 81.556050][ T1015] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.556153][ T1015] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.159906][ T5611] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.348662][ T5611] veth0_vlan: entered promiscuous mode [ 82.434136][ T5611] veth1_vlan: entered promiscuous mode [ 82.561707][ T5608] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.593763][ T5611] veth0_macvtap: entered promiscuous mode [ 82.620002][ T5611] veth1_macvtap: entered promiscuous mode [ 82.718565][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.730226][ T5609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.754114][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.795231][ T4925] Bluetooth: hci1: command tx timeout [ 82.795444][ T4925] Bluetooth: hci3: command tx timeout [ 82.818426][ T5608] veth0_vlan: entered promiscuous mode [ 82.875468][ T4925] Bluetooth: hci0: command tx timeout [ 82.875501][ T4925] Bluetooth: hci4: command tx timeout [ 82.875520][ T4925] Bluetooth: hci2: command tx timeout [ 82.886654][ T5610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.900264][ T5608] veth1_vlan: entered promiscuous mode [ 82.905404][ T1128] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.905628][ T1128] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.905662][ T1128] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.905694][ T1128] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.993866][ T5607] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.048591][ T5609] veth0_vlan: entered promiscuous mode [ 83.081513][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.081535][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.102027][ T5608] veth0_macvtap: entered promiscuous mode [ 83.127880][ T5608] veth1_macvtap: entered promiscuous mode [ 83.143572][ T5609] veth1_vlan: entered promiscuous mode [ 83.218130][ T5610] veth0_vlan: entered promiscuous mode [ 83.221806][ T1015] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.221826][ T1015] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.241879][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.255845][ T5610] veth1_vlan: entered promiscuous mode [ 83.267011][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.335776][ T1015] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.342351][ T5609] veth0_macvtap: entered promiscuous mode [ 83.397190][ T5609] veth1_macvtap: entered promiscuous mode [ 83.405044][ T1128] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.405239][ T51] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.405275][ T51] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.470690][ T5610] veth0_macvtap: entered promiscuous mode [ 83.475091][ T5611] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 83.541783][ T5610] veth1_macvtap: entered promiscuous mode [ 83.568809][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.636616][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.641063][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.653480][ T139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.653500][ T139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.679121][ T61] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.709573][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.749941][ T139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.749961][ T139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.805921][ T61] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.815803][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.815848][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.815880][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.815911][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.815943][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.815974][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.821902][ T5607] veth0_vlan: entered promiscuous mode [ 83.839337][ T5607] veth1_vlan: entered promiscuous mode [ 84.067612][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.067633][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.206186][ T5809] Bluetooth: MGMT ver 1.23 [ 84.233710][ T1015] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.233740][ T1015] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.256715][ T5607] veth0_macvtap: entered promiscuous mode [ 84.294237][ T5811] mmap: syz.1.6 (5811) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 84.318977][ T5607] veth1_macvtap: entered promiscuous mode [ 84.389945][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.389966][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.569573][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.662931][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.682008][ T5813] loop1: detected capacity change from 0 to 32768 [ 84.682321][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.682338][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.683682][ T5813] BTRFS warning: v1 space cache is deprecated, falling back to no space cache [ 84.696719][ T5813] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.6 (5813) [ 84.750196][ T5813] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 84.750238][ T5813] BTRFS info (device loop1): using sha256 checksum algorithm [ 84.850023][ T61] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.868145][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.869329][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.869370][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.881406][ T4925] Bluetooth: hci1: command tx timeout [ 84.881454][ T5619] Bluetooth: hci3: command tx timeout [ 84.908706][ T5813] BTRFS info (device loop1): rebuilding free space tree [ 84.942602][ T5813] BTRFS info (device loop1): disabling free space tree [ 84.942678][ T5813] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 84.942700][ T5813] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 84.950197][ T5813] BTRFS info (device loop1): enabling ssd optimizations [ 84.950228][ T5813] BTRFS info (device loop1): force clearing of disk cache [ 84.950243][ T5813] BTRFS info (device loop1): enabling auto defrag [ 84.950265][ T5813] BTRFS info (device loop1): max_inline set to 0 [ 84.961594][ T4925] Bluetooth: hci4: command tx timeout [ 84.961625][ T4925] Bluetooth: hci0: command tx timeout [ 84.961664][ T5619] Bluetooth: hci2: command tx timeout [ 85.039424][ T32] audit: type=1800 audit(1790903214.171:2): pid=5811 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.6" name="bus" dev="loop1" ino=263 res=0 errno=-22 [ 85.051304][ T32] audit: type=1800 audit(1790903214.171:3): pid=5811 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.6" name="bus" dev="loop1" ino=263 res=0 errno=-22 [ 85.363682][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.363710][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.519392][ T139] BTRFS info (device loop1): qgroup scan completed (inconsistency flag cleared) [ 86.689892][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.689933][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.889263][ T10] cfg80211: failed to load regulatory.db [ 87.123323][ T5608] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 91.661496][ T5886] capability: warning: `syz.1.16' uses deprecated v2 capabilities in a way that may be insecure [ 93.558058][ T5892] loop2: detected capacity change from 0 to 8192 [ 93.643255][ T5893] syzkaller0: entered promiscuous mode [ 93.643280][ T5893] syzkaller0: entered allmulticast mode [ 93.852226][ T5897] ptp ptp0: new virtual clock ptp1 [ 93.852252][ T5897] ptp ptp0: guarantee physical clock free running [ 93.852427][ T5899] ptp ptp0: delete virtual clock ptp1 [ 93.977838][ T5892] loop2: p2 p4[EZD] [ 94.196924][ T5892] loop2: p2 size 83886080 extends beyond EOD, truncated [ 94.256999][ T5892] loop2: p4 start 201326592 is beyond EOD, truncated [ 94.281817][ T5899] ptp ptp0: only physical clock in use now [ 94.784431][ T5909] netlink: 12 bytes leftover after parsing attributes in process `syz.1.20'. [ 95.047875][ T5716] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 95.105376][ T5909] netlink: 12 bytes leftover after parsing attributes in process `syz.1.20'. [ 95.253935][ T5892] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 96.220003][ T5716] usb 3-1: unable to get BOS descriptor or descriptor too short [ 96.223613][ T5716] usb 3-1: New USB device found: idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 96.248034][ T5716] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 96.248074][ T5716] usb 3-1: can't read configurations, error -71 [ 100.897388][ T5716] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 101.275193][ T5716] usb 3-1: device not accepting address 3, error -71 [ 101.281409][ T5716] usb usb3-port1: attempt power cycle [ 101.464519][ T5948] overlayfs: overlapping lowerdir path [ 104.015790][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 105.514026][ T5968] loop1: detected capacity change from 0 to 164 [ 108.384970][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 108.833097][ T5987] FAULT_INJECTION: forcing a failure. [ 108.833097][ T5987] name failslab, interval 1, probability 0, space 0, times 1 [ 108.833142][ T5987] CPU: 0 UID: 0 PID: 5987 Comm: syz.0.41 Not tainted syzkaller #0 PREEMPT(full) [ 108.833163][ T5987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 108.833182][ T5987] Call Trace: [ 108.833189][ T5987] [ 108.833198][ T5987] dump_stack_lvl+0xe8/0x150 [ 108.833234][ T5987] should_fail_ex+0x3eb/0x540 [ 108.833259][ T5987] should_failslab+0xa8/0x100 [ 108.833280][ T5987] __kmalloc_node_track_caller_noprof+0xf6/0x720 [ 108.833298][ T5987] ? __kasan_kmalloc+0x93/0xb0 [ 108.833315][ T5987] ? snd_timer_instance_new+0x6a/0x260 [ 108.833333][ T5987] ? snd_timer_instance_new+0x6a/0x260 [ 108.833352][ T5987] ? __kmalloc_cache_noprof+0x148/0x600 [ 108.833373][ T5987] kstrdup+0x42/0x100 [ 108.833393][ T5987] snd_timer_instance_new+0x6a/0x260 [ 108.833414][ T5987] snd_seq_timer_open+0x23e/0x620 [ 108.833439][ T5987] ? __pfx_snd_seq_timer_open+0x10/0x10 [ 108.833471][ T5987] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 108.833496][ T5987] snd_seq_queue_alloc+0x3ba/0x740 [ 108.833523][ T5987] snd_seq_ioctl_create_queue+0x7f/0x3c0 [ 108.833547][ T5987] snd_seq_oss_open+0x657/0xf40 [ 108.833572][ T5987] ? __pfx_snd_seq_oss_open+0x10/0x10 [ 108.833624][ T5987] ? rcu_is_watching+0x16/0xb0 [ 108.833643][ T5987] ? trace_contention_end+0x3d/0x140 [ 108.833689][ T5987] ? __pfx___mutex_lock+0x10/0x10 [ 108.833713][ T5987] ? __pfx_snd_seq_oss_event_input+0x10/0x10 [ 108.833732][ T5987] ? __pfx_free_devinfo+0x10/0x10 [ 108.833749][ T5987] ? do_raw_spin_unlock+0xf5/0x200 [ 108.833772][ T5987] ? soundcore_open+0x2da/0x490 [ 108.833792][ T5987] odev_open+0x67/0xa0 [ 108.833809][ T5987] chrdev_open+0x4d9/0x600 [ 108.833830][ T5987] ? __pfx_chrdev_open+0x10/0x10 [ 108.833848][ T5987] ? devcgroup_check_permission+0x31/0x8f0 [ 108.833870][ T5987] ? __pfx_chrdev_open+0x10/0x10 [ 108.833887][ T5987] do_dentry_open+0x80e/0x1360 [ 108.833915][ T5987] vfs_open_consume+0x4a/0x350 [ 108.833929][ T5987] ? path_openat+0x148a/0x1da0 [ 108.833949][ T5987] path_openat+0x14a6/0x1da0 [ 108.833988][ T5987] do_file_open+0x23e/0x4a0 [ 108.834012][ T5987] ? __pfx_do_file_open+0x10/0x10 [ 108.834050][ T5987] ? _raw_spin_unlock+0x28/0x50 [ 108.834067][ T5987] ? alloc_fd+0x6af/0x760 [ 108.834097][ T5987] do_sys_openat2+0x115/0x200 [ 108.834115][ T5987] ? __se_sys_futex+0x3a8/0x450 [ 108.834136][ T5987] ? __pfx_do_sys_openat2+0x10/0x10 [ 108.834156][ T5987] ? __pfx___se_sys_futex+0x10/0x10 [ 108.834182][ T5987] __x64_sys_openat+0x138/0x170 [ 108.834205][ T5987] do_syscall_64+0x166/0x520 [ 108.834221][ T5987] ? trace_irq_disable+0x3b/0x140 [ 108.834238][ T5987] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.834258][ T5987] ? clear_bhb_loop+0x70/0xc0 [ 108.834278][ T5987] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.834298][ T5987] RIP: 0033:0x7fdce279e159 [ 108.834324][ T5987] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 108.834340][ T5987] RSP: 002b:00007fdce3604028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 108.834361][ T5987] RAX: ffffffffffffffda RBX: 00007fdce2a25fa0 RCX: 00007fdce279e159 [ 108.834376][ T5987] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 00000000ffffff9c [ 108.834388][ T5987] RBP: 00007fdce283506b R08: 0000000000000000 R09: 0000000000000000 [ 108.834400][ T5987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 108.834411][ T5987] R13: 00007fdce2a26038 R14: 00007fdce2a25fa0 R15: 00007ffd199d40c8 [ 108.834441][ T5987] [ 108.951186][ T6001] sctp: [Deprecated]: syz.2.46 (pid 6001) Use of int in max_burst socket option deprecated. [ 108.951186][ T6001] Use struct sctp_assoc_value instead [ 110.945035][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 112.101255][ T6022] loop1: detected capacity change from 0 to 512 [ 112.121298][ T6022] EXT4-fs: Ignoring removed mblk_io_submit option [ 112.137797][ T6022] EXT4-fs: test_dummy_encryption requires encrypt feature [ 112.180056][ T32] audit: type=1326 audit(1790903241.311:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6023 comm="syz.2.50" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f620459e159 code=0x7ffc0000 [ 112.187170][ T32] audit: type=1326 audit(1790903241.311:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6023 comm="syz.2.50" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f620459e159 code=0x7ffc0000 [ 112.192988][ T32] audit: type=1326 audit(1790903241.311:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6023 comm="syz.2.50" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f620459e159 code=0x7ffc0000 [ 112.193042][ T32] audit: type=1326 audit(1790903241.311:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6023 comm="syz.2.50" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f620459e159 code=0x7ffc0000 [ 112.198430][ T32] audit: type=1326 audit(1790903241.311:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6023 comm="syz.2.50" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f620459e159 code=0x7ffc0000 [ 112.198474][ T32] audit: type=1326 audit(1790903241.311:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6023 comm="syz.2.50" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f620459e159 code=0x7ffc0000 [ 112.198509][ T32] audit: type=1326 audit(1790903241.311:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6023 comm="syz.2.50" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f620459e159 code=0x7ffc0000 [ 112.204160][ T32] audit: type=1326 audit(1790903241.311:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6023 comm="syz.2.50" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f620459e159 code=0x7ffc0000 [ 112.204204][ T32] audit: type=1326 audit(1790903241.311:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6023 comm="syz.2.50" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f620459e159 code=0x7ffc0000 [ 112.210820][ T32] audit: type=1326 audit(1790903241.341:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6023 comm="syz.2.50" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f620459e159 code=0x7ffc0000 [ 112.325684][ T6024] loop2: detected capacity change from 0 to 164 [ 112.651382][ T6033] netlink: 'syz.2.54': attribute type 1 has an invalid length. [ 113.538980][ T6033] macvlan2: entered promiscuous mode [ 113.539063][ T6033] macvlan2: entered allmulticast mode [ 113.982627][ T6038] loop4: detected capacity change from 0 to 32768 [ 113.991777][ T6038] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.55 (6038) [ 114.007487][ T6038] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 114.007518][ T6038] BTRFS info (device loop4): using sha256 checksum algorithm [ 114.148705][ T6038] BTRFS info (device loop4): enabling ssd optimizations [ 114.148724][ T6038] BTRFS info (device loop4): turning on sync discard [ 114.148732][ T6038] BTRFS info (device loop4): enabling free space tree [ 114.148751][ T6038] BTRFS info (device loop4): use zlib compression, level 3 [ 116.884935][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 117.311754][ T5607] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 122.999868][ T6091] sd 0:0:1:0: PR command failed: 1026 [ 122.999908][ T6091] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 122.999930][ T6091] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 123.744985][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 124.545216][ T10] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 126.364642][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 126.402253][ T6117] loop4: detected capacity change from 0 to 256 [ 127.131801][ T6128] netlink: 8 bytes leftover after parsing attributes in process `syz.4.69'. [ 128.048025][ T27] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 128.136684][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 128.140590][ T10] usb 4-1: New USB device found: idVendor=0582, idProduct=008d, bcdDevice=0.40 [ 128.140631][ T10] usb 4-1: too many configurations: 178, using maximum allowed: 8 [ 128.141519][ T10] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 128.141550][ T10] usb 4-1: can't read configurations, error -71 [ 128.234736][ T27] usb 3-1: Using ep0 maxpacket: 8 [ 128.235573][ T27] usb 3-1: New USB device found: idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 128.236862][ T27] usb 3-1: config 2 has an invalid interface number: 31 but max is 0 [ 128.236885][ T27] usb 3-1: config 2 has no interface number 0 [ 128.236925][ T27] usb 3-1: config 2 interface 31 has no altsetting 0 [ 128.240669][ T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.240691][ T27] usb 3-1: Product: syz [ 128.240705][ T27] usb 3-1: Manufacturer: syz [ 128.240718][ T27] usb 3-1: SerialNumber: syz [ 130.966070][ T27] ch9200 3-1:2.31: probe with driver ch9200 failed with error -71 [ 131.031175][ T27] usb 3-1: USB disconnect, device number 5 [ 132.708892][ T6167] netlink: 12 bytes leftover after parsing attributes in process `syz.1.82'. [ 132.956981][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.957036][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.274767][ T5619] Bluetooth: hci2: command 0x0406 tx timeout [ 135.287899][ T6181] loop3: detected capacity change from 0 to 128 [ 138.684732][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 138.847081][ T6206] syzkaller0: entered promiscuous mode [ 138.847104][ T6206] syzkaller0: entered allmulticast mode [ 139.632583][ T6213] syzkaller0: entered promiscuous mode [ 139.632605][ T6213] syzkaller0: entered allmulticast mode [ 141.547046][ T5737] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 141.712044][ T6241] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.97'. [ 141.712070][ T6241] veth0_to_bond: default FDB implementation only supports local addresses [ 141.744996][ T5737] usb 5-1: Using ep0 maxpacket: 8 [ 141.747191][ T5737] usb 5-1: New USB device found: idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 141.748294][ T5737] usb 5-1: config 2 has an invalid interface number: 31 but max is 0 [ 141.748325][ T5737] usb 5-1: config 2 has no interface number 0 [ 141.748363][ T5737] usb 5-1: config 2 interface 31 has no altsetting 0 [ 141.750717][ T5737] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.750754][ T5737] usb 5-1: Product: syz [ 141.750767][ T5737] usb 5-1: Manufacturer: syz [ 141.750781][ T5737] usb 5-1: SerialNumber: syz [ 142.222677][ T6254] [ 142.225046][ T6254] ====================================================== [ 142.232051][ T6254] WARNING: possible circular locking dependency detected [ 142.239095][ T6254] syzkaller #0 Not tainted [ 142.243494][ T6254] ------------------------------------------------------ [ 142.250494][ T6254] syz.3.101/6254 is trying to acquire lock: [ 142.256369][ T6254] ffff8880226cb348 (&type->i_mutex_dir_key#5){++++}-{4:4}, at: lookup_slow+0x46/0x80 [ 142.265850][ T6254] [ 142.265850][ T6254] but task is already holding lock: [ 142.273199][ T6254] ffff88807a65de40 (DCACHE_PAR_LOOKUP){+.+.}-{0:0}, at: __d_alloc_parallel+0x39e/0x1700 [ 142.282945][ T6254] [ 142.282945][ T6254] which lock already depends on the new lock. [ 142.282945][ T6254] [ 142.293346][ T6254] [ 142.293346][ T6254] the existing dependency chain (in reverse order) is: [ 142.302354][ T6254] [ 142.302354][ T6254] -> #1 (DCACHE_PAR_LOOKUP){+.+.}-{0:0}: [ 142.310166][ T6254] __d_alloc_parallel+0xc32/0x1700 [ 142.315793][ T6254] __lookup_slow+0x82/0x2f0 [ 142.320821][ T6254] lookup_slow+0x59/0x80 [ 142.325578][ T6254] link_path_walk+0xd22/0x1910 [ 142.330852][ T6254] path_openat+0x1c4/0x1da0 [ 142.335858][ T6254] do_file_open+0x23e/0x4a0 [ 142.340866][ T6254] do_sys_openat2+0x115/0x200 [ 142.346050][ T6254] __x64_sys_openat+0x138/0x170 [ 142.351407][ T6254] do_syscall_64+0x166/0x520 [ 142.356509][ T6254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.362916][ T6254] [ 142.362916][ T6254] -> #0 (&type->i_mutex_dir_key#5){++++}-{4:4}: [ 142.371340][ T6254] __lock_acquire+0x164c/0x2de0 [ 142.376704][ T6254] lock_acquire+0x115/0x350 [ 142.381716][ T6254] down_read+0x45/0x320 [ 142.386380][ T6254] lookup_slow+0x46/0x80 [ 142.391130][ T6254] ovl_lookup_single+0x323/0xe90 [ 142.397011][ T6254] ovl_lookup_layer+0x377/0x440 [ 142.402369][ T6254] ovl_lookup+0x5e5/0x1c80 [ 142.407289][ T6254] lookup_open+0x94b/0x1970 [ 142.412300][ T6254] path_openat+0x673/0x1da0 [ 142.417312][ T6254] do_file_open+0x23e/0x4a0 [ 142.422319][ T6254] do_sys_openat2+0x115/0x200 [ 142.427499][ T6254] __x64_sys_open+0x11e/0x150 [ 142.432693][ T6254] do_syscall_64+0x166/0x520 [ 142.437800][ T6254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.444207][ T6254] [ 142.444207][ T6254] other info that might help us debug this: [ 142.444207][ T6254] [ 142.454414][ T6254] Possible unsafe locking scenario: [ 142.454414][ T6254] [ 142.461881][ T6254] CPU0 CPU1 [ 142.467232][ T6254] ---- ---- [ 142.472580][ T6254] lock(DCACHE_PAR_LOOKUP); [ 142.477175][ T6254] lock(&type->i_mutex_dir_key#5); [ 142.484883][ T6254] lock(DCACHE_PAR_LOOKUP); [ 142.491987][ T6254] rlock(&type->i_mutex_dir_key#5); [ 142.497265][ T6254] [ 142.497265][ T6254] *** DEADLOCK *** [ 142.497265][ T6254] [ 142.505482][ T6254] locks held by syz.3.101/6254: 3, last CPU#1: [ 142.511621][ T6254] #0: ffff88802bc80460 (sb_writers#19){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 142.520842][ T6254] #1: ffff88805502c878 (&ovl_i_mutex_dir_key[depth]){+.+.}-{4:4}, at: lookup_open+0x246/0x1970 [ 142.531269][ T6254] #2: ffff88807a65de40 (DCACHE_PAR_LOOKUP){+.+.}-{0:0}, at: __d_alloc_parallel+0x39e/0x1700 [ 142.541442][ T6254] [ 142.541442][ T6254] stack backtrace: [ 142.547334][ T6254] CPU: 1 UID: 0 PID: 6254 Comm: syz.3.101 Not tainted syzkaller #0 PREEMPT(full) [ 142.556516][ T6254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 142.566561][ T6254] Call Trace: [ 142.569829][ T6254] [ 142.572748][ T6254] dump_stack_lvl+0xe8/0x150 [ 142.577341][ T6254] print_circular_bug+0x2e2/0x300 [ 142.582355][ T6254] check_noncircular+0x12f/0x150 [ 142.587282][ T6254] __lock_acquire+0x164c/0x2de0 [ 142.592129][ T6254] ? lock_acquire+0x115/0x350 [ 142.596803][ T6254] lock_acquire+0x115/0x350 [ 142.601294][ T6254] ? lookup_slow+0x46/0x80 [ 142.605699][ T6254] down_read+0x45/0x320 [ 142.609839][ T6254] ? lookup_slow+0x46/0x80 [ 142.614240][ T6254] ? d_lookup+0x8a/0xa0 [ 142.618383][ T6254] lookup_slow+0x46/0x80 [ 142.622617][ T6254] ovl_lookup_single+0x323/0xe90 [ 142.627547][ T6254] ? __pfx_ovl_lookup_single+0x10/0x10 [ 142.632993][ T6254] ? irqentry_exit+0x218/0x920 [ 142.637743][ T6254] ? lockdep_hardirqs_on+0x7b/0x110 [ 142.642935][ T6254] ovl_lookup_layer+0x377/0x440 [ 142.647780][ T6254] ovl_lookup+0x5e5/0x1c80 [ 142.652186][ T6254] ? __pfx___schedule+0x10/0x10 [ 142.657028][ T6254] ? __pfx_ovl_lookup+0x10/0x10 [ 142.661863][ T6254] ? irqentry_exit+0x218/0x920 [ 142.666615][ T6254] ? __pfx_ovl_lookup+0x10/0x10 [ 142.671458][ T6254] lookup_open+0x94b/0x1970 [ 142.675958][ T6254] path_openat+0x673/0x1da0 [ 142.680453][ T6254] do_file_open+0x23e/0x4a0 [ 142.684942][ T6254] ? __pfx_do_file_open+0x10/0x10 [ 142.689960][ T6254] ? _raw_spin_unlock+0x28/0x50 [ 142.694803][ T6254] ? alloc_fd+0x6af/0x760 [ 142.699121][ T6254] do_sys_openat2+0x115/0x200 [ 142.703787][ T6254] ? lockdep_hardirqs_on+0x7b/0x110 [ 142.708972][ T6254] ? __pfx_do_sys_openat2+0x10/0x10 [ 142.714159][ T6254] __x64_sys_open+0x11e/0x150 [ 142.718834][ T6254] do_syscall_64+0x166/0x520 [ 142.723413][ T6254] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.729471][ T6254] ? clear_bhb_loop+0x70/0xc0 [ 142.734135][ T6254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.740016][ T6254] RIP: 0033:0x7ff43bf9e159 [ 142.744437][ T6254] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 142.764031][ T6254] RSP: 002b:00007ff43a1b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 142.772433][ T6254] RAX: ffffffffffffffda RBX: 00007ff43c226180 RCX: 00007ff43bf9e159 [ 142.780392][ T6254] RDX: 1df2a23c5997fa5f RSI: 0000000000080242 RDI: 0000200000000580 [ 142.788350][ T6254] RBP: 00007ff43c03506b R08: 0000000000000000 R09: 0000000000000000 [ 142.796311][ T6254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 142.804272][ T6254] R13: 00007ff43c226218 R14: 00007ff43c226180 R15: 00007ffc8daa2dd8 [ 142.812236][ T6254] [ 143.218847][ T6255] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 143.219025][ T6255] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 144.075584][ T5737] ch9200 5-1:2.31: probe with driver ch9200 failed with error -32 [ 144.853876][ T5716] usb 5-1: USB disconnect, device number 2