last executing test programs: 4.269571593s ago: executing program 1 (id=2): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$pokeuser(0x6, r0, 0x5, 0x10001) 3.745966549s ago: executing program 1 (id=7): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$unix(r1, &(0x7f00000000c0)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x303de1f53b11ae}, 0x20008840) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, &(0x7f0000000080)=0x7, 0x4) ioctl$BLKGETNRZONES(r0, 0x80041285, &(0x7f0000000040)=0x5) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f00000012c0)=0x44fb, 0x4) recvmmsg(r1, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x1000400000de, 0x0) r2 = dup(r0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xa, 0x13, r2, 0x2000) write$P9_RFSYNC(r2, &(0x7f0000000000)={0x7, 0x33, 0x1}, 0x7) syz_emit_vhci(&(0x7f0000000180)=@HCI_VENDOR_PKT, 0x2) 3.582516686s ago: executing program 0 (id=1): r0 = socket(0x840000000002, 0x3, 0xfd) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={0x20, r2, 0x1, 0x70bd2b, 0x25dbdc09, {}, [{{0x8, 0x1, r3}, {0x4}}]}, 0x20}, 0x1, 0x400000000000000}, 0x0) sendmsg$inet(r0, &(0x7f00000001c0)={&(0x7f00000006c0)={0x2, 0x4e22, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000007c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @dev={0xac, 0x14, 0x14, 0x3d}, @rand_addr=0x640120fd}}}], 0x20}, 0x4004010) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@deltclass={0x440, 0x29, 0x100, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x9, 0xffff}, {0x4, 0x9}, {0xb, 0xc}}, [@c_atm={{0x8}, {0x4}}, @c_cbq={{0x8}, {0x408, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0x2, 0x80000001, 0x0, 0x7, 0x6, 0x10001, 0x1, 0x0, 0x87e0, 0x44, 0x1c, 0xebe, 0x108, 0x2, 0x8001, 0x10000, 0x6, 0x6, 0x5, 0x4, 0x8, 0xc, 0x6, 0xfff, 0x1, 0x9, 0xffffff40, 0x5, 0x7, 0xa, 0x8529, 0x200, 0x1bc2, 0x7, 0x7, 0x5690bb00, 0x9, 0xfffffffd, 0x4ac9, 0x6, 0x7fff, 0xa3, 0x7, 0x2, 0x81, 0x1, 0x4, 0xffff710f, 0x10000, 0x2, 0x1, 0xe541380, 0x40, 0x0, 0x100, 0x6, 0x3d, 0x4, 0x6, 0x8, 0x1, 0x4, 0x2, 0x9, 0x7, 0x3, 0xfd, 0x440f, 0x6, 0x3b, 0x7, 0x1, 0x5, 0x1, 0x38000040, 0x1, 0x4, 0x3ff, 0x8, 0x2, 0x9, 0x7, 0x8, 0x1, 0xd6, 0x2, 0x4, 0x0, 0x30, 0xccf1, 0x7fa7, 0xffff, 0x878a, 0x1, 0xfffffff8, 0x5, 0x2, 0x6, 0xa, 0x9, 0x1, 0x50000000, 0x8, 0x7fffffff, 0xffff, 0x2, 0x6, 0x4, 0x2, 0xd0f, 0x3, 0x70, 0x2, 0xfff, 0x6, 0xfffffffd, 0x24f0, 0x0, 0x6, 0x8, 0x80000000, 0xff, 0x6, 0xfffffffb, 0xffff7fff, 0xb02, 0x2, 0x9, 0x200, 0x80000001, 0x0, 0xa6, 0x2, 0x80000000, 0x5, 0xfffffff9, 0x2, 0x0, 0x4, 0x7, 0x47, 0x3, 0xd1b7, 0x2, 0x8, 0x55, 0x0, 0x0, 0x80000000, 0x9, 0x6, 0x9, 0x100, 0x6, 0x1, 0x6, 0xe, 0xfffffff8, 0x2, 0x5, 0x7, 0x611, 0x0, 0x28, 0x0, 0x3, 0x2, 0x3, 0x3, 0x6, 0x4, 0x1007, 0x2, 0x94, 0xe74, 0x80000000, 0x63, 0x400, 0x3, 0x0, 0x7, 0x6, 0x155a, 0x5, 0x401, 0x5, 0x7ff, 0x8, 0x4, 0x2, 0xbf4b, 0x2, 0x1, 0x401, 0x7, 0x0, 0x6, 0x800, 0x40000002, 0x0, 0x9, 0x9, 0x4, 0x4, 0x29, 0x800, 0x4, 0x45df, 0x9, 0x7fff, 0x2, 0x7f, 0x8, 0x0, 0x5, 0x2, 0x0, 0x9, 0x90, 0xcca, 0x3, 0x8, 0x200, 0xff, 0x5, 0x6, 0x6, 0x4, 0x6, 0x400, 0x9d, 0x7fffffff, 0x80, 0xb, 0xffff, 0x6, 0x2, 0xa, 0x12a1, 0x5, 0x8, 0x4, 0x3, 0x7, 0xe755, 0x0, 0xa65f, 0x3, 0x6dbc, 0x7, 0x2, 0x1, 0x7f, 0x100, 0x401, 0xc6]}]}}]}, 0xfffffffffffffd22}, 0x1, 0x0, 0x0, 0x8000}, 0x200048c5) socket$nl_xfrm(0x10, 0x3, 0x6) socket$packet(0x11, 0x2, 0x300) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f0000000340)={0x1, 0x4}, 0x8) sendmmsg$inet6(r4, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e25, 0x97, @mcast2}, 0x1c, 0x0}}], 0x1, 0x4004800) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r6, &(0x7f0000000e00)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000d80)={&(0x7f0000001300)=ANY=[@ANYBLOB="24040000", @ANYRES16=0x0, @ANYBLOB="000525bd7000fcdbdf253900000008000300", @ANYRES32=0x0, @ANYBLOB="c4005a80280003802200020024300e0c490f03462e064b381b384e4f0f3c44333f29084003422553071000000c00028005000400010000008c000180050007000100000005000700000000002200010006126060021636600b1b12483622301216020304360404180403160033060000050007000000000005000600020000001400030000000900ecfa0300ff0700021dff0d00050007000100000014000300fbff04000200ff03ff0f030000017f00140005008d00810008000000bf0000020700010044035a804000018005000600010000000d0001003630243606006c1824000000050007000000000007000100120c48001400050000040900090003000500e10005000600140003800f000100023604360124600c050468000c0001800500060002000000b4000080140005008000f7ff0500090002000200181d020005000400000000001400030005000200589805000100050081fe080010000100180c12600930366048181b48050006000000000005000600020000001400030002000400040004000002ffffff00fdff4c000200051a08463104173a3b092334310819b00e1501232f36170e4735444a341a3d1b481b18004b3f572c323c342d3a3610050d2b54160128365450134c04454d472529052130023b3321bc00008014000300000001010180ff00010107000900010014000500b5003fbd0104100001010100070000000500040002000000180001000524000409006c09010936611803050c18050c240700010003111200140005000000000000000500050080000700970714000500050006000800020085009d00080007000500060001000000090002001238460931102529213841220e103e2e2c493f3107282b504c482f001a1623394e183f394650293f520040522f500839312915000c000380050007000000000040000080180001000b01600b0548160b0205180c0209180101160c032400010048130400031b6031121604481b3022121816013f0616020418301212241606055c0002801e000100040b240c306004360b181b302412121248036c480516000236360000140005000700010407000600020002000300030014000500ff00040000000600040000000700de0005000600000000000500040000000000c80000801c0001000b020c163003036c090c2424040618051b002402160c047848000200b3483d41463b0e42162234041817290d4d4c29355341191f4e394b1e4a392941553904340c1c043c18494e3d063043524b200739381d193d0031182f0543203332281a28050006000200000005000600000000004700020050404b1b140f38102d1633313021333c011b4e431033483f1839e1134606482c52314d0c0d131c49452c3e4b052d020138534a4e103d0f533953464932370b543b2e430005000700000000003110b7f3e0de2eddba8a5e5dc9fa70ec6bb5f51b346a915ee4115533ca660df8e1ef82fd3fe5978a0f1fdc1855a9d8f176e71ec7f82c4a4f4d3f5fc4fd341e80bdb5a43978c7c7dd1895ab2b3a02feff1f463f75238ca6c9e06887146306e9d7ba58d0d1e2e7f18da03eb22ac4edabc6ebbf4d470ec296c6689e08e87a81183ad9a16861f56e3d84"], 0x424}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) sendmsg$nl_xfrm(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0a010100000000000000000000000000000004d43200000000000000000000000000ffffe000000100080000000000007d01000000000000000000000000000004"], 0x158}}, 0x4000804) syz_open_dev$video4linux(&(0x7f0000000000), 0x6, 0x40000) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x11, 0x0, 0x0) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001280)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="110200000000000000000100000030000180060005004e21000014000400000000000000000000000000000000010800060001000000060001000a"], 0x44}}, 0x0) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r5, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="100025bd7000ffdbdf250800000008000400c2001e000800030003000000e42db1e9083b810c4c5a14c99036b2fd9c42886a7f3584a5f927b9439ec37963a75febba5608760a2259c70ebe9ab15e6e721c19a5fdb2d0099a8c42bb0b1ee409a708451734e29019af077495f1686c9600db22913aaa91f1a51fa22a9864786ded6fba70835255a287e1d0e85b3a808885b96ea96ba060c68adf0f012ad17c856bbaf3897b56c4e5371c8eb42059d6984334b51c51"], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) futex(&(0x7f000000cffc), 0xb, 0x0, 0x0, &(0x7f0000048000)=0x1, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000fbdbdf25270000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) 3.298114896s ago: executing program 1 (id=8): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0x6, "152a44e3112c0000f5a82d86c200000000000000000000000000000800"}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000140), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f00000005c0)={0x1, @pix_mp={0x20008de, 0xffff8000, 0x30314247, 0x6, 0x3, [{0x1ff, 0x6}, {0xc00}, {0x7, 0x5de3}, {0x14, 0x5}, {0x9, 0x4000069a}, {0x7, 0x3}, {0x81, 0x8}, {0x4, 0x80000017}], 0x7b, 0x3, 0x8, 0x1, 0x4}}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r2, 0x8983, &(0x7f0000000380)={0x6, 'wlan1\x00', {0x1}, 0x5}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f00000001c0)={0x0, 'team_slave_1\x00', {0x3}, 0x3}) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r5, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r5, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r4, 0x3ba0, &(0x7f0000001200)={0x48, 0x8, r6, 0x0, 0xffff, 0x1, &(0x7f0000000480)='|', 0x5}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r8 = fanotify_init(0x200, 0x0) fanotify_mark(r8, 0x201, 0x1036, 0xffffffffffffffff, 0x0) syz_open_dev$video(&(0x7f0000000000), 0x75, 0x0) r9 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000080), 0x8100, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r9, 0xc0184800, &(0x7f0000000100)={0x4, r7}) r11 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r11, 0x40186f40, &(0x7f0000000700)={0xfffe, 0x0, 0xf3d, 0x1, '\x00', 0x10000}) ioctl$DMA_BUF_SET_NAME_A(r10, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x8, 0x4, 0x8b, 0xfffa}, 0x3b, [0x7ffe, 0xc95a, 0x1, 0xb, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x288, 0x9, 0x63, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x7, 0x3, 0x0, 0x6, 0x4, 0x8, 0x3ff, 0x3c5b, 0x1, 0x3, 0x9, 0x1, 0x1f461e2c, 0x0, 0xe660, 0x4, 0x7, 0x101, 0x7fff, 0x1, 0x80000000, 0x242, 0x3, 0xe, 0xfffffffb, 0x71, 0xfffffff8, 0x7, 0x0, 0x0, 0xd, 0x80003d, 0x8f, 0x6, 0x10000006, 0xfffffc00, 0x5, 0x4, 0x8, 0x0, 0x20002, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x1, 0xffff, 0x134, 0x7ffe, 0x9, 0xfffffff3, 0x5, 0xcb, 0x6, 0xd, 0x2bf, 0x6c9, 0x9, 0x6, 0x3, 0x0, 0x7, 0x5, 0x0, 0xe, 0xfa, 0x74, 0xea4, 0x0, 0x4, 0x5, 0x8000, 0x3, 0x400, 0x1, 0x6, 0x7, 0xff, 0x5, 0x5, 0x800, 0x4, 0x0, 0x2, 0x100002, 0xa, 0x4, 0x6, 0x8, 0x800, 0x6, 0x7, 0x8002, 0x1, 0xfe000000, 0xff7f, 0x2, 0x7f, 0x9, 0x2, 0xffffffff, 0x9, 0x1, 0x7, 0x80000003, 0x9, 0x48c93690, 0x42, 0x9], [0x400, 0x4, 0x0, 0x8, 0xfffffffe, 0xfffff76b, 0x8d2, 0x9, 0x5, 0x7fff, 0xfffffffc, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x83, 0x80000003, 0x200009, 0x100003e7, 0x9, 0x5, 0x3, 0x2, 0xf38, 0x8, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0xf, 0xd, 0x9b8, 0x8d8d, 0xa2, 0x7, 0x53cf697b, 0x4, 0xa, 0xac8, 0x7, 0x2, 0x3, 0x7ff, 0xfffffffc, 0x2, 0x4, 0xffff, 0x0, 0x1a, 0x1c, 0x9, 0x3, 0x6, 0xaaed, 0x4, 0x65], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0x20000ce7, 0x1ff, 0x2, 0xf58, 0x5, 0x0, 0x101, 0x10000, 0x6, 0x7ffe, 0x80000000, 0x200a620, 0x2, 0xc, 0x1, 0x4, 0x14c, 0x60a7, 0xe, 0x7, 0xffffffff, 0x80000004, 0x8, 0x8, 0x5, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7f, 0x104, 0x9606, 0x7, 0x2, 0x2, 0x8006, 0x1, 0x0, 0x4, 0x8, 0x30b1d693, 0xa1f, 0x8, 0x7, 0x101, 0x6c1b, 0x9, 0x4, 0xb0b2748, 0x1, 0x1, 0x200, 0xffbf2441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 3.246767713s ago: executing program 2 (id=9): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/wakeup_count', 0x101a02, 0x0) ioctl$DRM_IOCTL_AGP_ENABLE(r0, 0x40086432, &(0x7f0000000000)=0x2) write$6lowpan_enable(r0, &(0x7f0000000140)='1', 0x1) write$binfmt_elf64(r0, &(0x7f00000002c0)=ANY=[], 0x40) r1 = openat$cgroup_pressure(r0, &(0x7f0000000240)='memory.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r1, &(0x7f0000000280)={'some', 0x20, 0xffffffffffff7fff, 0x20, 0x7}, 0x2f) r2 = socket$tipc(0x1e, 0x5, 0x0) ioctl$VHOST_VDPA_GET_CONFIG(r0, 0x8008af73, &(0x7f0000000200)={0x0, 0xe, ""/14}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae03, 0x36) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x40, 0x3, 0x3}, 0x10) r4 = getpgid(0x0) timer_create(0x5, &(0x7f0000000180)={0x0, 0xd, 0x0, @tid=r4}, &(0x7f00000001c0)) getsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r5 = socket$inet(0x2, 0x2, 0x0) mmap(&(0x7f00007fe000/0x800000)=nil, 0x800000, 0x0, 0x10, r5, 0xe6921000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000001680)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001300), 0x0, 0x20000000}}], 0x1, 0x0) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, 0x0) r7 = socket$netlink(0x10, 0x3, 0x4) write(r7, &(0x7f0000000380)="29000000140005b7ff000051915f95eb01010003a606a40e07fff024bb000000000000000040000000", 0x29) r8 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000080)='source', &(0x7f00000019c0)='//\xf2/\x06\b/\\\\o/\xea\x95\x9a/\x00bb\x8a\x80\x91\xdf\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6h\xd1\x1d\xac\xaa\xfb\xc7Y\xcd\xc5n\xeb\xab\xf70\x91\xef\x8b0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r7, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8=r5], 0x3c}}, 0x10) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f00000000c0)=@x86={0x81, 0x8, 0x2, 0x0, 0x2, 0x14, 0x4, 0x2, 0x4, 0xfd, 0x0, 0x11, 0x0, 0x2f, 0x1, 0xb, 0x0, 0x7, 0x3, '\x00', 0x2, 0x1ff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r0, 0x215eb000) r8 = socket$netlink(0x10, 0x3, 0xb) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r9, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r9, 0x0) setsockopt$sock_int(r9, 0x1, 0xf, &(0x7f00000002c0)=0xb, 0x4) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r10, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r10, &(0x7f0000000540)={0xa, 0x4e22, 0x7, @empty, 0x1fc}, 0x1c) listen(r10, 0x80000003) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r8) openat$audio1(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x28, r11, 0x287f365f86784aca, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x311914a2, 0x3e}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x28}, 0x1, 0x0, 0x0, 0x40050}, 0x0) 2.625874182s ago: executing program 3 (id=4): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000100001000c000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576653000000000000000000014000100776732000000000000000000c6e49c0f5c000000180a0101000b000000000000010000000900020073797a30000000000900010073797a300000000030000380"], 0x110}}, 0x0) 2.535545322s ago: executing program 2 (id=11): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b26, &(0x7f0000000140)={'wlan1\x00', @multicast}) (fail_nth: 3) 2.065497067s ago: executing program 2 (id=12): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="30000000410007012bbd700000000000047c00000400c2800c00018006000600894f00"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) ioctl$SIOCSIFHWADDR(r0, 0x8b26, &(0x7f0000000140)={'wlan1\x00', @multicast}) 1.832085819s ago: executing program 3 (id=13): r0 = syz_open_dev$sndctrl(&(0x7f0000000180), 0x2, 0x0) (async) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_CMAP(r1, 0x4b71, &(0x7f0000000000)={0x9, 0x5, 0x5, 0xfffffffffffffc01, 0x6, 0xfff}) (async) fdatasync(r1) pipe(&(0x7f0000002080)={0xffffffffffffffff}) copy_file_range(r2, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0) (async) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0xc0045543, &(0x7f0000000080)=0xfdfdfffd) 1.600967145s ago: executing program 2 (id=14): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002240)=[{&(0x7f00000000c0)={0x14, 0x16, 0xf15, 0x0, 0xa1, "", [@typed={0x4}]}, 0x14}], 0x1}, 0x0) 1.436140921s ago: executing program 3 (id=15): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) (async) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, 0x0) ioctl$USBDEVFS_SETINTERFACE(0xffffffffffffffff, 0x80085504, &(0x7f0000000180)={0x8, 0x4df}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) (async, rerun: 64) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async, rerun: 64) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x9) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) (async) r3 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYRES16=r1, @ANYRESHEX, @ANYRES16=r2, @ANYRES64=r1, @ANYRESOCT=r2], 0xfffffdef}, 0x1, 0x0, 0x0, 0x2004c804}, 0x8000) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) ioctl$OCFS2_IOC_GROUP_EXTEND(r0, 0x40046f01, 0x0) (rerun: 64) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f00000002c0)=ANY=[@ANYRESOCT=r0, @ANYRES16=r5, @ANYBLOB="010000ff1f00fbdbdf250100000008000200000000000500050000000000080003000100000048000180781b9ee3ba7abc0500020020000000060001000200000007f306000a000000080003"], 0x84}}, 0x0) (async) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYRESHEX=0x0, @ANYRESDEC=r1, @ANYBLOB="000628bd70b9286a8c94c0fb9400"], 0x14}, 0x1, 0x0, 0x0, 0x20000900}, 0x8000) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-aes-aesni\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="1563b6c5820fae9d6dcd3292fa54c7beef915d56058e616e", 0x18) setresgid(0xee00, 0xee01, 0x0) setregid(0x0, 0x0) (async) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f00000007c0)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) (async, rerun: 64) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) (async, rerun: 64) r8 = openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) prctl$PR_MCE_KILL(0x41555856, 0x0, 0x1) (async) ioctl$RNDADDENTROPY(r8, 0x5207, 0x0) (async) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 1.116573611s ago: executing program 1 (id=16): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0xac500, 0x0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000100)={0x0, 0xfffffffffffffffc}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f00000004c0)={r3, 0x0, 0x4, 0x0, 0x2, [], [0x0, 0x0, 0x0, 0x10000], [0x0, 0x0, 0xfffffffc], [0x1]}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000240)={r3, 0xc89, 0xa, 0xfffffffa, 0x3, [], [0x5, 0x5, 0xfffffffd, 0x2], [0xe, 0x7, 0xffffffff, 0x8000], [0xfffffffffffffff8, 0xa679, 0x1, 0x7f]}) fstat(r0, &(0x7f0000000000)) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x2) dup2(r4, r4) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) write$UHID_CREATE(r4, &(0x7f0000001900)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000900)=""/4096, 0x1000, 0x0, 0xe3, 0x9, 0x3, 0x81}}, 0x120) r5 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r5, 0xc1205531, 0x0) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="020100000a0000000600000000000000030008000000000000000000ffffffff0000000000000000010005"], 0x50}}, 0x0) ioctl$KVM_SET_TSC_KHZ_vm(r6, 0xaea2, 0x0) 973.916991ms ago: executing program 3 (id=17): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000040)={0x44, r1, 0xb97534d5fe970ccf, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x2c9}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0xffff}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x6, 0xbe, "9d6c"}]}, 0x44}}, 0xc000000) 563.289895ms ago: executing program 3 (id=18): r0 = epoll_create1(0x80000) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x6) fchdir(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x20) mkdir(&(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_open_dev$video(&(0x7f0000000040), 0x100, 0x0) socket(0x23, 0x0, 0x5) ioctl$VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000280)={0x1, @pix_mp={0x9, 0x0, 0x52424752, 0x8, 0x7, [{0x5, 0x614c}, {0x80, 0x3}, {0x80, 0xff}, {0x7, 0x8000}, {0x9, 0x2}, {0x5, 0xffffffc0}, {0x7fffffff}, {0xe5ac, 0x401}], 0x6, 0x3, 0x7, 0x2, 0x7}}) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r6, &(0x7f0000000400)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000480)=0x4000000, r7, 0x0, 0x1, 0x1c}}, 0x20) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000001a00), 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1) r8 = getpid() r9 = syz_pidfd_open(r8, 0x0) setns(r9, 0x24020000) r10 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r11 = syz_pidfd_open(r10, 0x0) setns(r11, 0x24020000) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f00000000c0)='sysfs\x00', 0x989, 0x0) r12 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r4, &(0x7f0000000100)={0x2000001c}) epoll_ctl$EPOLL_CTL_ADD(r12, 0x1, r0, &(0x7f0000000000)={0xa0000001}) sendmsg(r4, &(0x7f00000019c0)={&(0x7f0000000380)=@nl=@kern={0x10, 0x0, 0x0, 0x80000}, 0x80, &(0x7f0000001780)=[{&(0x7f0000000400)}, {&(0x7f0000000440)="fdb53f7e445dcc", 0x7}, {&(0x7f0000000480)}, {&(0x7f00000004c0)="2fb9d998b386f62bbdd40ff011c7fae6a1e8ed2424f573b98bf087887886a25887d0633155e3c0896b7cad69c3ebf73525", 0x31}, {&(0x7f0000000500)="10e65b89a0a29d69e6a010a0175d194ae2023eefe9e9a3c6569226d3ede420feb86458444b0e1f3da04ee4a61c6a5cfaa7dda5b95a5c855fef9b5a2f1d5937982cc02c906ad7b79d3cfbad3ebf02c15b4057ee12e6f132201df770d19078b564cfdf14ed18ab69473ffdb655e07d1d15e4181f3456167ab2da0885df29a1f064755ca8c0ace6de0c9cb632fa3ae976755c7ace58b90757e39306ff6ab8fa4065aef4baf80adc1d50872e9167e1339dbec071a0a9aa90d736723372d980721d24273a17d46f665e", 0xc7}, {&(0x7f0000001a00)="97505622336f294af4a71b3b572f149df5ce6ac54cf245cd026bf62bd2a160e408760f8b97b2098eae98ba530e1f361c3b06e237a8cf53316ef2b556e90d5344ab450de8c28c92d0a5c71b6d7fa7adc7a03a557018f84033e7bf97821e0b94e1851d28e7dfa4", 0x66}, {&(0x7f0000000680)="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", 0x1000}, {&(0x7f0000001680)="a77a957991c00fc0ddcbc54db2f909c6c090f069a8ef4f3f0e0c6c0b6b930cf5099e567297549f8fe680a2601026992c765002e6d795a5656d0a0035b30bcb849c1ec9c748ab8a17dfb6617b2f5d65a7c47e43a52da71fe0212a0f9bb1f95a7bb7cad9ce8ff1b87f6b305254dfc85d4154dfc04a1cc5", 0x76}, {&(0x7f0000001700)="eb4e41ce95f7dbb35feb9e6e2e1b8c70bbda0b2440f06d42c95fbb143cab56d3a0f599b69fc2628456d4e240411796901d1691f05aa4c70310c286d535540f05f7f9f025aa26839b7263585b02dcc5fc149a938952a5d81b7574f825997ea773913d63a695623d5359d609fbdacfbb979eec4998f268", 0x76}], 0x9, &(0x7f0000001840)=[{0x80, 0x1, 0x1, "5de1f96e48098cc513ee5019c894cfc885d36f0a2d15b5b04e5514f5816c2bdcc69acc6003787aab142a0c41f7976ddf45215c6389a566b4087511489ffe01e5750370f2a3330e5ee366043746c90173639c81a93f830a07dabc97f070d43f9e1830adaa1233682096d419"}, {0xe8, 0x102, 0xbee9, "70e5c1d6ade5d70d734907558cfc7140fc0dcbce64c753ec8a9ff28f0ac280b191d7c988f013fdf6bfcf8cc45f39134649ac54298a8b5ee4027dad038cbfb7c218e92fff6604c58fd3a9471a1733a4b54050f60d1a5e83894fce395d97b6824044d119d69de3b30cb027d884ccefb7f9ace26236e86374feefff5b051044c9e6a6f5724da371d1dcdc52de7994f2dbd07b04b0b765a8c27430429fde72b635c4bbabf6e3ea2ad8d1618b3e9c0c5e2283fbe972fea4d9ed264bf7573f6c4ef59ca677be03cb7f70332639d0b9cd26de25aa281fe1ff"}], 0x168}, 0x2080) 385.499446ms ago: executing program 1 (id=19): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/wakeup_count', 0x101a02, 0x0) ioctl$DRM_IOCTL_AGP_ENABLE(r0, 0x40086432, &(0x7f0000000000)=0x2) write$6lowpan_enable(r0, &(0x7f0000000140)='1', 0x1) 378.536481ms ago: executing program 2 (id=20): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYRESOCT=r1, @ANYRES16=r1, @ANYBLOB="050005000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050002000000080005000e", @ANYBLOB="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"], 0x2c}}, 0x0) 81.775459ms ago: executing program 1 (id=21): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c4b20710200e0101"], 0x0) (async) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c4b20710200e0101"], 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) syz_usb_ep_write(r0, 0x81, 0x39, &(0x7f0000000100)="40a647de28493c0198023ee398c6bf7c5db29c43f28ed678c09b1abcd144201ba4a7ee7c2ede1147cc538fcdb3fdfc1d57c1f138a0164f2f41") 0s ago: executing program 2 (id=22): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x80000, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=r0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) pidfd_getfd(r4, r5, 0x0) write$UHID_SET_REPORT_REPLY(r2, &(0x7f00000000c0)={0xe, {0xa, 0x2, 0xc, 0x17, "a7bd1162747afc4d581892d0c94d852752ef4c3e402547"}}, 0x23) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000dd000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x8}}, [@NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_ID={0x8}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x452369c81ff10127}}}, 0x5c}, 0x1, 0x0, 0x0, 0x4080}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.165' (ED25519) to the list of known hosts. [ 90.135437][ T5604] cgroup: Unknown subsys name 'net' [ 90.367705][ T5604] cgroup: Unknown subsys name 'cpuset' [ 90.432176][ T5604] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 91.949131][ T10] cfg80211: failed to load regulatory.db [ 92.454701][ T5604] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 96.864457][ T60] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 96.899220][ T5636] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 96.912402][ T5636] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 96.920352][ T5636] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 96.946206][ T5636] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 96.958634][ T5636] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 96.961175][ T5636] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 96.968486][ T5636] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 97.000043][ T5636] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 97.000838][ T5630] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 97.002986][ T5630] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 97.005946][ T5636] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 97.007644][ T5636] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 97.011978][ T5636] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 97.012266][ T5639] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 97.021554][ T5636] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 97.021729][ T5639] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 97.044899][ T5633] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 97.093777][ T5630] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 97.152221][ T5633] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 99.113378][ T60] Bluetooth: hci0: command tx timeout [ 99.113387][ T5630] Bluetooth: hci3: command tx timeout [ 99.281548][ T5630] Bluetooth: hci1: command tx timeout [ 99.281558][ T60] Bluetooth: hci2: command tx timeout [ 99.383547][ T5623] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.384773][ T5623] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.385029][ T5623] bridge_slave_0: entered allmulticast mode [ 99.387702][ T5623] bridge_slave_0: entered promiscuous mode [ 99.433663][ T5622] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.433922][ T5622] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.434130][ T5622] bridge_slave_0: entered allmulticast mode [ 99.436642][ T5622] bridge_slave_0: entered promiscuous mode [ 99.478070][ T5623] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.478373][ T5623] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.478621][ T5623] bridge_slave_1: entered allmulticast mode [ 99.481237][ T5623] bridge_slave_1: entered promiscuous mode [ 99.518812][ T5622] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.519105][ T5622] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.519327][ T5622] bridge_slave_1: entered allmulticast mode [ 99.524764][ T5622] bridge_slave_1: entered promiscuous mode [ 99.675731][ T5623] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.708773][ T5622] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.740736][ T5623] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.845572][ T5622] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.846018][ T5625] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.846315][ T5625] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.846522][ T5625] bridge_slave_0: entered allmulticast mode [ 99.849209][ T5625] bridge_slave_0: entered promiscuous mode [ 99.908972][ T5624] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.909229][ T5624] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.909437][ T5624] bridge_slave_0: entered allmulticast mode [ 99.937634][ T5624] bridge_slave_0: entered promiscuous mode [ 99.965181][ T5625] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.965533][ T5625] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.965981][ T5625] bridge_slave_1: entered allmulticast mode [ 99.968585][ T5625] bridge_slave_1: entered promiscuous mode [ 100.011051][ T5624] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.014004][ T5624] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.019803][ T5624] bridge_slave_1: entered allmulticast mode [ 100.032416][ T5624] bridge_slave_1: entered promiscuous mode [ 100.079520][ T5623] team0: Port device team_slave_0 added [ 100.108725][ T5622] team0: Port device team_slave_0 added [ 100.136525][ T5623] team0: Port device team_slave_1 added [ 100.173639][ T5622] team0: Port device team_slave_1 added [ 100.188603][ T5625] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.224224][ T5624] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.265132][ T5625] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.302066][ T5624] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.350040][ T5623] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.350053][ T5623] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.350081][ T5623] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.410754][ T5622] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.410767][ T5622] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.410787][ T5622] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.464933][ T5623] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.464947][ T5623] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.464967][ T5623] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.520569][ T5622] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.520582][ T5622] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.520609][ T5622] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.547966][ T5625] team0: Port device team_slave_0 added [ 100.588728][ T5624] team0: Port device team_slave_0 added [ 100.609637][ T5625] team0: Port device team_slave_1 added [ 100.622097][ T5624] team0: Port device team_slave_1 added [ 100.736119][ T5625] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.736133][ T5625] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.736152][ T5625] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.790502][ T5624] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.790515][ T5624] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.790538][ T5624] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.848211][ T5625] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.848224][ T5625] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.848244][ T5625] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.875475][ T5623] hsr_slave_0: entered promiscuous mode [ 100.890300][ T5623] hsr_slave_1: entered promiscuous mode [ 101.164405][ T5624] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.164419][ T5624] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.164439][ T5624] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.179355][ T5622] hsr_slave_0: entered promiscuous mode [ 101.186271][ T5622] hsr_slave_1: entered promiscuous mode [ 101.202608][ T60] Bluetooth: hci0: command tx timeout [ 101.202637][ T5630] Bluetooth: hci3: command tx timeout [ 101.202842][ T5622] debugfs: 'hsr0' already exists in 'hsr' [ 101.203192][ T5622] Cannot create hsr debugfs directory [ 101.351536][ T5630] Bluetooth: hci2: command tx timeout [ 101.362168][ T5630] Bluetooth: hci1: command tx timeout [ 101.512419][ T5625] hsr_slave_0: entered promiscuous mode [ 101.515830][ T5625] hsr_slave_1: entered promiscuous mode [ 101.517585][ T5625] debugfs: 'hsr0' already exists in 'hsr' [ 101.517617][ T5625] Cannot create hsr debugfs directory [ 101.559297][ T5624] hsr_slave_0: entered promiscuous mode [ 101.560983][ T5624] hsr_slave_1: entered promiscuous mode [ 101.564547][ T5624] debugfs: 'hsr0' already exists in 'hsr' [ 101.564565][ T5624] Cannot create hsr debugfs directory [ 102.388031][ T5623] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 102.448301][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 102.463400][ T5623] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 102.496501][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 102.511261][ T5623] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 102.553489][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 102.578759][ T5623] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 102.608275][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 102.731425][ T5624] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 102.759537][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 102.773046][ T5624] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 102.815542][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 102.837259][ T5624] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 102.869369][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 102.906857][ T5624] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 102.949135][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 103.130515][ T5622] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 103.158508][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 103.175124][ T5622] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 103.205026][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 103.217793][ T5622] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 103.271862][ T5630] Bluetooth: hci0: command tx timeout [ 103.271898][ T5630] Bluetooth: hci3: command tx timeout [ 103.276349][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 103.346854][ T5622] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 103.378295][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 103.442050][ T5630] Bluetooth: hci2: command tx timeout [ 103.442682][ T60] Bluetooth: hci1: command tx timeout [ 103.530580][ T5625] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 103.557098][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 103.577037][ T5625] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 103.617904][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 103.632936][ T5625] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 103.667723][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 103.688497][ T5625] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 103.727648][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 103.806013][ T5623] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.938141][ T5623] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.010097][ T1453] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.010882][ T1453] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.087320][ T5624] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.133939][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.134153][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.240453][ T5624] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.294995][ T1453] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.295194][ T1453] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.336219][ T5622] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.378457][ T1453] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.378642][ T1453] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.504441][ T5622] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.550054][ T5625] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.596415][ T3388] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.596693][ T3388] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.679714][ T3388] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.679828][ T3388] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.771141][ T5625] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.867095][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.867277][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.936216][ T3388] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.941211][ T3388] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.354604][ T60] Bluetooth: hci3: command tx timeout [ 105.354637][ T60] Bluetooth: hci0: command tx timeout [ 105.521839][ T5630] Bluetooth: hci1: command tx timeout [ 105.521873][ T5630] Bluetooth: hci2: command tx timeout [ 105.842559][ T5623] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.066820][ T5624] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.273926][ T5623] veth0_vlan: entered promiscuous mode [ 106.376969][ T5623] veth1_vlan: entered promiscuous mode [ 106.425203][ T5622] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.567656][ T5624] veth0_vlan: entered promiscuous mode [ 106.701111][ T5624] veth1_vlan: entered promiscuous mode [ 106.725547][ T5625] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.728114][ T5623] veth0_macvtap: entered promiscuous mode [ 106.786302][ T5623] veth1_macvtap: entered promiscuous mode [ 106.843728][ T5622] veth0_vlan: entered promiscuous mode [ 106.924438][ T5622] veth1_vlan: entered promiscuous mode [ 106.939452][ T5623] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.978452][ T5623] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.990607][ T5624] veth0_macvtap: entered promiscuous mode [ 107.055288][ T5624] veth1_macvtap: entered promiscuous mode [ 107.072741][ T3348] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.079541][ T3348] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.107779][ T3348] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.137690][ T3348] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.164903][ T5625] veth0_vlan: entered promiscuous mode [ 107.325778][ T5624] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.406658][ T5625] veth1_vlan: entered promiscuous mode [ 107.456029][ T5624] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.458204][ T5622] veth0_macvtap: entered promiscuous mode [ 107.612907][ T5622] veth1_macvtap: entered promiscuous mode [ 107.628012][ T1183] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.644108][ T1183] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.662754][ T1183] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.667187][ T1183] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.855062][ T125] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.855089][ T125] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.939852][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.065821][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.097470][ T5625] veth0_macvtap: entered promiscuous mode [ 108.237838][ T5625] veth1_macvtap: entered promiscuous mode [ 108.256374][ T125] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.256396][ T125] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.283911][ T2234] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.315649][ T2234] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.328162][ T2234] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.389989][ T2234] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.411718][ T1183] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.411739][ T1183] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.680790][ T5625] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.860969][ T5625] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.904603][ T125] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.904642][ T125] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.099801][ T3348] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.140952][ T3348] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.318550][ T3348] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.350051][ T3348] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.413915][ T3348] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.413937][ T3348] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.776935][ T2287] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.776956][ T2287] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.290712][ T1183] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.290735][ T1183] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.842419][ T2234] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.842441][ T2234] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.747290][ T5800] FAULT_INJECTION: forcing a failure. [ 111.747290][ T5800] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 111.747346][ T5800] CPU: 0 UID: 0 PID: 5800 Comm: syz.2.11 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 111.747376][ T5800] Tainted: [L]=SOFTLOCKUP [ 111.747384][ T5800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 111.747404][ T5800] Call Trace: [ 111.747416][ T5800] [ 111.747426][ T5800] dump_stack_lvl+0xe8/0x150 [ 111.747458][ T5800] should_fail_ex+0x46b/0x600 [ 111.747500][ T5800] _copy_from_user+0x2d/0xb0 [ 111.747521][ T5800] wext_handle_ioctl+0xc7/0x1d0 [ 111.747555][ T5800] ? __pfx_wext_handle_ioctl+0x10/0x10 [ 111.747591][ T5800] sock_ioctl+0x15c/0x7f0 [ 111.747621][ T5800] ? __pfx_sock_ioctl+0x10/0x10 [ 111.747641][ T5800] ? __fget_files+0x2a/0x420 [ 111.747663][ T5800] ? __fget_files+0x3a6/0x420 [ 111.747683][ T5800] ? __fget_files+0x2a/0x420 [ 111.747707][ T5800] ? bpf_lsm_file_ioctl+0x9/0x20 [ 111.747734][ T5800] ? __pfx_sock_ioctl+0x10/0x10 [ 111.747753][ T5800] __se_sys_ioctl+0xff/0x170 [ 111.747781][ T5800] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.747802][ T5800] do_syscall_64+0x174/0x580 [ 111.747832][ T5800] ? trace_irq_disable+0x3b/0x140 [ 111.747879][ T5800] ? clear_bhb_loop+0x40/0x90 [ 111.747909][ T5800] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.747929][ T5800] RIP: 0033:0x7f518747ce59 [ 111.747952][ T5800] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 111.747966][ T5800] RSP: 002b:00007f51856d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 111.747985][ T5800] RAX: ffffffffffffffda RBX: 00007f51876f5fa0 RCX: 00007f518747ce59 [ 111.747998][ T5800] RDX: 0000200000000140 RSI: 0000000000008b26 RDI: 0000000000000004 [ 111.748009][ T5800] RBP: 00007f51856d6090 R08: 0000000000000000 R09: 0000000000000000 [ 111.748021][ T5800] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 111.748039][ T5800] R13: 00007f51876f6038 R14: 00007f51876f5fa0 R15: 00007ffd155d3518 [ 111.748068][ T5800] [ 112.053959][ T5801] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 112.230710][ T5806] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12'. [ 112.249691][ T5806] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 112.327473][ T5806] warning: `syz.2.12' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 115.002694][ T836] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 115.125035][ T5840] ================================================================== [ 115.125054][ T5840] BUG: KASAN: slab-use-after-free in reverse_path_check_proc+0x5b/0x240 [ 115.125098][ T5840] Read of size 8 at addr ffff8880381df240 by task syz.3.18/5840 [ 115.125117][ T5840] [ 115.125132][ T5840] CPU: 0 UID: 0 PID: 5840 Comm: syz.3.18 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 115.125163][ T5840] Tainted: [L]=SOFTLOCKUP [ 115.125171][ T5840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 115.125184][ T5840] Call Trace: [ 115.125193][ T5840] [ 115.125202][ T5840] dump_stack_lvl+0xe8/0x150 [ 115.125231][ T5840] print_address_description+0x55/0x1e0 [ 115.125263][ T5840] ? reverse_path_check_proc+0x5b/0x240 [ 115.125298][ T5840] print_report+0x58/0x70 [ 115.125326][ T5840] kasan_report+0x117/0x150 [ 115.125353][ T5840] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 115.125389][ T5840] ? reverse_path_check_proc+0x5b/0x240 [ 115.125435][ T5840] ? ep_insert+0xbbb/0x1820 [ 115.125465][ T5840] reverse_path_check_proc+0x5b/0x240 [ 115.125504][ T5840] ? ep_insert+0xbbb/0x1820 [ 115.125533][ T5840] ep_insert+0xc6c/0x1820 [ 115.125575][ T5840] ? __pfx_ep_insert+0x10/0x10 [ 115.125610][ T5840] ? lockdep_hardirqs_on+0x7a/0x110 [ 115.125643][ T5840] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 115.125676][ T5840] ? mutex_lock_nested+0x152/0x1d0 [ 115.125701][ T5840] ? do_epoll_ctl_file+0xc69/0xed0 [ 115.125733][ T5840] do_epoll_ctl_file+0x8bb/0xed0 [ 115.125765][ T5840] ? do_epoll_ctl_file+0xac3/0xed0 [ 115.125797][ T5840] ? __pfx_do_epoll_ctl_file+0x10/0x10 [ 115.125829][ T5840] ? __fget_files+0x3a6/0x420 [ 115.125855][ T5840] ? __fget_files+0x2a/0x420 [ 115.125886][ T5840] __se_sys_epoll_ctl+0x14e/0x210 [ 115.125918][ T5840] ? __pfx___se_sys_epoll_ctl+0x10/0x10 [ 115.125953][ T5840] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.125977][ T5840] do_syscall_64+0x174/0x580 [ 115.126011][ T5840] ? trace_irq_disable+0x3b/0x140 [ 115.126036][ T5840] ? clear_bhb_loop+0x40/0x90 [ 115.126062][ T5840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.126086][ T5840] RIP: 0033:0x7f03b961ce59 [ 115.126107][ T5840] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 115.126127][ T5840] RSP: 002b:00007f03b7409028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 115.126151][ T5840] RAX: ffffffffffffffda RBX: 00007f03b9896270 RCX: 00007f03b961ce59 [ 115.126169][ T5840] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 000000000000000b [ 115.126183][ T5840] RBP: 00007f03b96b2d6f R08: 0000000000000000 R09: 0000000000000000 [ 115.126197][ T5840] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 115.126212][ T5840] R13: 00007f03b9896308 R14: 00007f03b9896270 R15: 00007fffe91c6918 [ 115.126238][ T5840] [ 115.126246][ T5840] [ 115.126251][ T5840] Allocated by task 5835: [ 115.126262][ T5840] kasan_save_track+0x3e/0x80 [ 115.126286][ T5840] __kasan_slab_alloc+0x6c/0x80 [ 115.126309][ T5840] kmem_cache_alloc_noprof+0x33b/0x680 [ 115.126333][ T5840] ep_insert+0x512/0x1820 [ 115.126359][ T5840] do_epoll_ctl_file+0x8bb/0xed0 [ 115.126384][ T5840] __se_sys_epoll_ctl+0x14e/0x210 [ 115.126418][ T5840] do_syscall_64+0x174/0x580 [ 115.126444][ T5840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.126463][ T5840] [ 115.126467][ T5840] Freed by task 5835: [ 115.126476][ T5840] kasan_save_track+0x3e/0x80 [ 115.126496][ T5840] kasan_save_free_info+0x46/0x50 [ 115.126524][ T5840] __kasan_slab_free+0x5c/0x80 [ 115.126545][ T5840] kmem_cache_free+0x187/0x6c0 [ 115.126568][ T5840] eventpoll_release_file+0xc2/0x240 [ 115.126592][ T5840] __fput+0x83c/0xa70 [ 115.126611][ T5840] task_work_run+0x1d9/0x270 [ 115.126630][ T5840] get_signal+0x11eb/0x1330 [ 115.126656][ T5840] arch_do_signal_or_restart+0xbc/0x840 [ 115.126675][ T5840] exit_to_user_mode_loop+0xa9/0x680 [ 115.126698][ T5840] do_syscall_64+0x353/0x580 [ 115.126727][ T5840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.126746][ T5840] [ 115.126751][ T5840] The buggy address belongs to the object at ffff8880381df240 [ 115.126751][ T5840] which belongs to the cache ep_head of size 16 [ 115.126769][ T5840] The buggy address is located 0 bytes inside of [ 115.126769][ T5840] freed 16-byte region [ffff8880381df240, ffff8880381df250) [ 115.126791][ T5840] [ 115.126797][ T5840] The buggy address belongs to the physical page: [ 115.126821][ T5840] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880381df960 pfn:0x381df [ 115.126843][ T5840] memcg:ffff88805dddc001 [ 115.126852][ T5840] flags: 0x80000000000200(workingset|node=0|zone=1) [ 115.126878][ T5840] page_type: f5(slab) [ 115.126899][ T5840] raw: 0080000000000200 ffff888140eb1dc0 ffffea0000fb1510 ffffea0000fcd9d0 [ 115.126919][ T5840] raw: ffff8880381df960 0000000800800034 00000000f5000000 ffff88805dddc001 [ 115.126930][ T5840] page dumped because: kasan: bad access detected [ 115.126946][ T5840] page_owner tracks the page as allocated [ 115.126954][ T5840] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4982, tgid 4982 (udevd), ts 31626083892, free_ts 0 [ 115.126991][ T5840] post_alloc_hook+0x1f9/0x250 [ 115.127017][ T5840] get_page_from_freelist+0x265c/0x26e0 [ 115.127046][ T5840] __alloc_frozen_pages_noprof+0x18d/0x380 [ 115.127076][ T5840] allocate_slab+0x74/0x5e0 [ 115.127106][ T5840] refill_objects+0x33c/0x3d0 [ 115.127137][ T5840] __pcs_replace_empty_main+0x373/0x720 [ 115.127170][ T5840] kmem_cache_alloc_noprof+0x433/0x680 [ 115.127193][ T5840] ep_insert+0x512/0x1820 [ 115.127219][ T5840] do_epoll_ctl_file+0x8bb/0xed0 [ 115.127247][ T5840] __se_sys_epoll_ctl+0x14e/0x210 [ 115.127275][ T5840] do_syscall_64+0x174/0x580 [ 115.127307][ T5840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.127327][ T5840] page_owner free stack trace missing [ 115.127335][ T5840] [ 115.127340][ T5840] Memory state around the buggy address: [ 115.127352][ T5840] ffff8880381df100: fa fb fc fc fa fb fc fc fa fb fc fc fa fb fc fc [ 115.127368][ T5840] ffff8880381df180: fa fb fc fc fa fb fc fc fa fb fc fc fa fb fc fc [ 115.127382][ T5840] >ffff8880381df200: fa fb fc fc 00 00 fc fc fa fb fc fc fa fb fc fc [ 115.127393][ T5840] ^ [ 115.127405][ T5840] ffff8880381df280: fa fb fc fc 00 00 fc fc fa fb fc fc 00 00 fc fc [ 115.127430][ T5840] ffff8880381df300: 00 00 fc fc fa fb fc fc fa fb fc fc fa fb fc fc [ 115.127442][ T5840] ================================================================== [ 115.146945][ T5840] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 115.147019][ T5840] CPU: 0 UID: 0 PID: 5840 Comm: syz.3.18 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 115.147110][ T5840] Tainted: [L]=SOFTLOCKUP [ 115.147132][ T5840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 115.147171][ T5840] Call Trace: [ 115.147193][ T5840] [ 115.147222][ T5840] vpanic+0x56c/0xa60 [ 115.147329][ T5840] ? __pfx_vpanic+0x10/0x10 [ 115.147427][ T5840] panic+0xc5/0xd0 [ 115.147510][ T5840] ? __pfx_panic+0x10/0x10 [ 115.147596][ T5840] ? preempt_schedule_thunk+0x16/0x40 [ 115.147693][ T5840] ? preempt_schedule_thunk+0x16/0x40 [ 115.147782][ T5840] ? reverse_path_check_proc+0x5b/0x240 [ 115.147883][ T5840] check_panic_on_warn+0x89/0xb0 [ 115.147919][ T5840] ? reverse_path_check_proc+0x5b/0x240 [ 115.147954][ T5840] end_report+0x73/0x170 [ 115.147983][ T5840] ? reverse_path_check_proc+0x5b/0x240 [ 115.148026][ T5840] kasan_report+0x128/0x150 [ 115.148118][ T5840] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 115.148214][ T5840] ? reverse_path_check_proc+0x5b/0x240 [ 115.148309][ T5840] ? ep_insert+0xbbb/0x1820 [ 115.148389][ T5840] reverse_path_check_proc+0x5b/0x240 [ 115.148480][ T5840] ? ep_insert+0xbbb/0x1820 [ 115.148535][ T5840] ep_insert+0xc6c/0x1820 [ 115.148630][ T5840] ? __pfx_ep_insert+0x10/0x10 [ 115.148709][ T5840] ? lockdep_hardirqs_on+0x7a/0x110 [ 115.148797][ T5840] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 115.148889][ T5840] ? mutex_lock_nested+0x152/0x1d0 [ 115.148947][ T5840] ? do_epoll_ctl_file+0xc69/0xed0 [ 115.149005][ T5840] do_epoll_ctl_file+0x8bb/0xed0 [ 115.149037][ T5840] ? do_epoll_ctl_file+0xac3/0xed0 [ 115.149070][ T5840] ? __pfx_do_epoll_ctl_file+0x10/0x10 [ 115.149112][ T5840] ? __fget_files+0x3a6/0x420 [ 115.149177][ T5840] ? __fget_files+0x2a/0x420 [ 115.149262][ T5840] __se_sys_epoll_ctl+0x14e/0x210 [ 115.149354][ T5840] ? __pfx___se_sys_epoll_ctl+0x10/0x10 [ 115.149389][ T5840] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.149420][ T5840] do_syscall_64+0x174/0x580 [ 115.149455][ T5840] ? trace_irq_disable+0x3b/0x140 [ 115.149479][ T5840] ? clear_bhb_loop+0x40/0x90 [ 115.149504][ T5840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.149526][ T5840] RIP: 0033:0x7f03b961ce59 [ 115.149545][ T5840] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 115.149564][ T5840] RSP: 002b:00007f03b7409028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 115.149593][ T5840] RAX: ffffffffffffffda RBX: 00007f03b9896270 RCX: 00007f03b961ce59 [ 115.149611][ T5840] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 000000000000000b [ 115.149624][ T5840] RBP: 00007f03b96b2d6f R08: 0000000000000000 R09: 0000000000000000 [ 115.149638][ T5840] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 115.149652][ T5840] R13: 00007f03b9896308 R14: 00007f03b9896270 R15: 00007fffe91c6918 [ 115.149678][ T5840] [ 115.149844][ T5840] Kernel Offset: disabled